Comment 40 for bug 451375

Revision history for this message
Andrej RohaĆ­ (arohau) wrote :

Greetings,

Seems that this bug is affecting the latest 2.6.32-11.15 kernel in Lucid. Running the simple C program to reproduce the failure from comment #2 I get the following.

Without AppArmor profile:

open("/var/tmp/foo", O_RDWR|O_CREAT, 0700) = 3
ftruncate(3, 0) = 0
truncate("/var/tmp/foo", 0) = 0
unlink("/var/tmp/foo") = 0
ftruncate(3, 0) = 0
truncate("/var/tmp/foo", 0) = -1 ENOENT (No such file or directory)
write(2, "failed (No such file or director"..., 72failed (No such file or directory) to post unlink truncate /var/tmp/foo
) = 72
close(3) = 0
exit_group(0) = ?

With AppArmor profile:

open("/var/tmp/foo", O_RDWR|O_CREAT, 0700) = 3
ftruncate(3, 0) = 0
truncate("/var/tmp/foo", 0) = 0
unlink("/var/tmp/foo") = 0
ftruncate(3, 0) = -1 ENOENT (No such file or directory)
write(2, "failed (No such file or director"..., 60failed (No such file or directory) to post unlink ftruncate
) = 60
truncate("/var/tmp/foo", 0) = -1 ENOENT (No such file or directory)
write(2, "failed (No such file or director"..., 72failed (No such file or directory) to post unlink truncate /var/tmp/foo
) = 72
close(3) = 0
exit_group(0) = ?

type=APPARMOR_DENIED msg=audit(1264257858.066:923): operation="truncate" info="Failed name lookup - deleted entry" error=-2 pid=4911 parent=4910 profile="/tmp/trunc" requested_mask="w::" denied_mask="w::" fsuid=1000 ouid=1000 name=2F7661722F746D702F666F6F202864656C6574656429

Profile itself:

#include <tunables/global>
/tmp/trunc {
  #include <abstractions/base>
  #include <abstractions/user-tmp>
}

Please advise. Thank you for attention.