On 2017-02-21 09:58 PM, Seth Arnold wrote: > Hi Simon, could you capture the output of apparmor_parser -p on your > sshd profile?
Here it is: https://paste.ubuntu.com/24044131/
> There's no 'unix' rules in the portion pasted to github.
Indeed, I only added this workaround later on:
# required within a container/namespace unix (send,receive) type=stream addr=none,
I don't like this workaround because I cannot make sense of it and I'm not even understanding it...
> Also, does 'peer="---"' ring any bells for you?
Nope, sorry.
Thanks Seth, Simon
On 2017-02-21 09:58 PM, Seth Arnold wrote:
> Hi Simon, could you capture the output of apparmor_parser -p on your
> sshd profile?
Here it is: https:/ /paste. ubuntu. com/24044131/
> There's no 'unix' rules in the portion pasted to github.
Indeed, I only added this workaround later on:
# required within a container/namespace
unix (send,receive) type=stream addr=none,
I don't like this workaround because I cannot make sense of it and I'm
not even understanding it...
> Also, does 'peer="---"' ring any bells for you?
Nope, sorry.
Thanks Seth,
Simon