apparmor init script does not work with insserv

Bug #505013 reported by Martin-Éric Racine
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
Low
Kees Cook

Bug Description

Binary package hint: apparmor

Setting up apparmor (2.3.1+bzr1312-0ubuntu3) ...
Installing new version of config file /etc/apparmor/functions ...
Installing new version of config file /etc/init.d/apparmor ...
insserv: Service mountall has to be enabled to start service apparmor
insserv: exiting now!
 * Starting AppArmor profiles [ OK ]
 * Reloading AppArmor profiles [ OK ]

ProblemType: Bug
ApparmorStatusOutput:
 Error: command /usr/sbin/apparmor_status failed with exit code 4: You do not have enough privilege to read the profile set.
 apparmor module is loaded.
Architecture: i386
Date: Sat Jan 9 02:30:53 2010
DistroRelease: Ubuntu 10.04
Package: apparmor 2.3.1+bzr1312-0ubuntu3
ProcEnviron:
 LANGUAGE=fi_FI:fi:en_US:en
 PATH=(custom, user)
 LANG=fi_FI.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48+bug396286v5-generic
SourcePackage: apparmor
Tags: lucid
Uname: Linux 2.6.31-14-generic i586

Revision history for this message
Martin-Éric Racine (q-funk) wrote :
Revision history for this message
Kees Cook (kees) wrote :

Thanks for the report. I'm not sure what the problem is that you're reporting. Can you give more details?

Changed in apparmor (Ubuntu):
status: New → Incomplete
Revision history for this message
Martin-Éric Racine (q-funk) wrote :

As shown above, insserv fails to operate, because Apport's init script depends on another init script that has been converted to an Upstart task. since Apport is an Ubuntu-specific tool it, too, ought to be converted to an Upstart task.

Revision history for this message
Martin Pitt (pitti) wrote :

I think you are confusing apport and apparmor :-). Apport already has an upstart script, and the problem was reported against apparmor.

Revision history for this message
Martin-Éric Racine (q-funk) wrote :

Oops! Indeed so. Typos r us. Thak you for re-assigning to AppArmor. Is the report still incomplete?

Revision history for this message
Kees Cook (kees) wrote :

Right, fully converting apparmor to an upstart script will solve this. It is expected for the maverick cycle. Thanks!

summary: - apport needs upgrading for upstart
+ apparmor init script does not work with insserv
Changed in apparmor (Ubuntu):
status: Incomplete → Confirmed
importance: Undecided → Low
assignee: nobody → Kees Cook (kees)
Revision history for this message
Martin-Éric Racine (q-funk) wrote :

Still applies to Maverick as of August 4th 2010:

Setting up apparmor (2.5-0ubuntu4) ...
Installing new version of config file /etc/apparmor.d/abstractions/gnome ...
insserv: Service mountall has to be enabled to start service apparmor
insserv: exiting now!
 * Starting AppArmor profiles Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
                                                                                                                                                      [ OK ]
 * Reloading AppArmor profiles Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
                                                                                                                                                      [ OK ]
Setting up libapparmor1 (2.5-0ubuntu4) ...
Setting up libapparmor-perl (2.5-0ubuntu4) ...
Setting up apparmor-utils (2.5-0ubuntu4) ...

Revision history for this message
Kees Cook (kees) wrote :

This has been fixed in natty (s/mountall/$remote_fs/) now.

Changed in apparmor (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.