Writing updated profile for /usr/bin/konversation.
Setting /usr/bin/konversation to complain mode.
Before you begin, you may wish to check if a
profile already exists for the application you
wish to confine. See the following wiki page for
more information: http://wiki.apparmor.net/index.php/Profiles
Please start the application to be profiled in
another window and exercise its functionality now.
Once completed, select the "Scan" option below in
order to scan the system logs for AppArmor events.
For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.
Profiling: /usr/bin/konversation
[(S)can system log for AppArmor events] / (F)inish
Reading log entries from /var/log/syslog.
Updating AppArmor profiles in /etc/apparmor.d.
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 402, in read_log
self.add_event_to_tree(event)
File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 206, in add_event_to_tree
e = self.parse_event_for_tree(e)
File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 303, in parse_event_for_tree
raise AppArmorException(_('Log contains unknown mode %s') % rmask)
apparmor.common.AppArmorException: 'Log contains unknown mode senw'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/sbin/aa-genprof", line 151, in <module>
lp_ret = apparmor.do_logprof_pass(logmark, passno)
File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2189, in do_logprof_pass
log = log_reader.read_log(logmark)
File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 407, in read_log
raise AppArmorBug(ex_msg) # py3-only: from None
apparmor.common.AppArmorBug: Log contains unknown mode senw
This error was caused by the log line:
Jul 6 12:31:45 kernel: [ 1585.343460] audit: type=1400 audit(1467822705.150:668): apparmor="ALLOWED" operation="file_perm" profile="/usr/bin/konversation" pid=6877 comm="konversation" laddr=192.168.1.22 lport=58236 faddr=164.132.77.237 fport=6697 family="inet" sock_type="stream" protocol=6 requested_mask="send" denied_mask="send"
How do I apply the above mentioned hotfix?
Writing updated profile for /usr/bin/ konversation. konversation to complain mode.
Setting /usr/bin/
Before you begin, you may wish to check if a wiki.apparmor. net/index. php/Profiles
profile already exists for the application you
wish to confine. See the following wiki page for
more information:
http://
Please start the application to be profiled in
another window and exercise its functionality now.
Once completed, select the "Scan" option below in
order to scan the system logs for AppArmor events.
For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.
Profiling: /usr/bin/ konversation
[(S)can system log for AppArmor events] / (F)inish python3/ dist-packages/ apparmor/ logparser. py", line 402, in read_log event_to_ tree(event) python3/ dist-packages/ apparmor/ logparser. py", line 206, in add_event_to_tree event_for_ tree(e) python3/ dist-packages/ apparmor/ logparser. py", line 303, in parse_event_ for_tree on(_('Log contains unknown mode %s') % rmask) common. AppArmorExcepti on: 'Log contains unknown mode senw'
Reading log entries from /var/log/syslog.
Updating AppArmor profiles in /etc/apparmor.d.
Traceback (most recent call last):
File "/usr/lib/
self.add_
File "/usr/lib/
e = self.parse_
File "/usr/lib/
raise AppArmorExcepti
apparmor.
During handling of the above exception, another exception occurred:
Traceback (most recent call last): aa-genprof" , line 151, in <module> do_logprof_ pass(logmark, passno) python3/ dist-packages/ apparmor/ aa.py", line 2189, in do_logprof_pass read_log( logmark) python3/ dist-packages/ apparmor/ logparser. py", line 407, in read_log common. AppArmorBug: Log contains unknown mode senw
File "/usr/sbin/
lp_ret = apparmor.
File "/usr/lib/
log = log_reader.
File "/usr/lib/
raise AppArmorBug(ex_msg) # py3-only: from None
apparmor.
This error was caused by the log line: 5.150:668) : apparmor="ALLOWED" operation= "file_perm" profile= "/usr/bin/ konversation" pid=6877 comm="konversation" laddr=192.168.1.22 lport=58236 faddr=164. 132.77. 237 fport=6697 family="inet" sock_type="stream" protocol=6 requested_ mask="send" denied_mask="send"
Jul 6 12:31:45 kernel: [ 1585.343460] audit: type=1400 audit(146782270