| 2013-05-01 20:25:40 |
Oliver Brakmann |
bug |
|
|
added bug |
| 2013-05-02 07:26:08 |
Timo Aaltonen |
sssd (Ubuntu): importance |
Undecided |
High |
|
| 2013-05-02 07:26:08 |
Timo Aaltonen |
sssd (Ubuntu): status |
New |
In Progress |
|
| 2013-05-02 07:26:08 |
Timo Aaltonen |
sssd (Ubuntu): assignee |
|
Timo Aaltonen (tjaalton) |
|
| 2013-05-02 16:07:34 |
Timo Aaltonen |
nominated for series |
|
Ubuntu Raring |
|
| 2013-05-02 16:07:34 |
Timo Aaltonen |
bug task added |
|
sssd (Ubuntu Raring) |
|
| 2013-05-02 16:10:21 |
Launchpad Janitor |
sssd (Ubuntu): status |
In Progress |
Fix Released |
|
| 2013-06-17 08:42:07 |
Timo Aaltonen |
sssd (Ubuntu Raring): importance |
Undecided |
High |
|
| 2013-06-17 08:42:07 |
Timo Aaltonen |
sssd (Ubuntu Raring): status |
New |
In Progress |
|
| 2013-06-17 08:42:20 |
Timo Aaltonen |
bug |
|
|
added subscriber Ubuntu Package Archive Administrators |
| 2013-07-01 08:08:33 |
Timo Aaltonen |
description |
An incorrect path statement in sssd's apparmor profile prevents sssd from forking its helper services. The corresponding log messages look like this:
/var/log/syslog:
May 1 21:55:17 ares sssd: Starting up
May 1 21:55:18 ares kernel: [ 23.115299] type=1400 audit(1367438118.048:16): apparmor="DENIED" operation="exec" parent=925 profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/sssd/sssd_be" pid=929 comm="sssd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
May 1 21:55:18 ares kernel: [ 23.152108] type=1400 audit(1367438118.088:17): apparmor="DENIED" operation="exec" parent=925 profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/sssd/sssd_be" pid=930 comm="sssd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
May 1 21:55:24 ares kernel: [ 29.156118] type=1400 audit(1367438124.092:48): apparmor="DENIED" operation="exec" parent=925 profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/sssd/sssd_be" pid=1293 comm="sssd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
/etc/apparmor.d/usr.sbin.sssd contains this line:
/usr/lib/sssd/sssd/* rix,
It has to be changed to look like this to make sssd work again:
/usr/lib/@{multiarch}/sssd/* rix,
The bug affects Ubuntu 13.04 (and probably Saucy) only. |
[Impact]
helper processes can't start due to a bug in the apparmor profile
[Test case]
configure the daemon and see how the helpers fail to start
[Regression potential]
none really, it is an obvious bug in the profile
--
An incorrect path statement in sssd's apparmor profile prevents sssd from forking its helper services. The corresponding log messages look like this:
/var/log/syslog:
May 1 21:55:17 ares sssd: Starting up
May 1 21:55:18 ares kernel: [ 23.115299] type=1400 audit(1367438118.048:16): apparmor="DENIED" operation="exec" parent=925 profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/sssd/sssd_be" pid=929 comm="sssd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
May 1 21:55:18 ares kernel: [ 23.152108] type=1400 audit(1367438118.088:17): apparmor="DENIED" operation="exec" parent=925 profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/sssd/sssd_be" pid=930 comm="sssd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
May 1 21:55:24 ares kernel: [ 29.156118] type=1400 audit(1367438124.092:48): apparmor="DENIED" operation="exec" parent=925 profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/sssd/sssd_be" pid=1293 comm="sssd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
/etc/apparmor.d/usr.sbin.sssd contains this line:
/usr/lib/sssd/sssd/* rix,
It has to be changed to look like this to make sssd work again:
/usr/lib/@{multiarch}/sssd/* rix,
The bug affects Ubuntu 13.04 (and probably Saucy) only. |
|
| 2013-07-05 09:15:46 |
Colin Watson |
sssd (Ubuntu Raring): status |
In Progress |
Fix Committed |
|
| 2013-07-05 09:15:48 |
Colin Watson |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2013-07-05 09:15:49 |
Colin Watson |
bug |
|
|
added subscriber SRU Verification |
| 2013-07-05 09:15:51 |
Colin Watson |
tags |
|
verification-needed |
|
| 2013-08-19 06:29:41 |
Oliver Brakmann |
tags |
verification-needed |
verification-done |
|
| 2014-05-17 04:11:28 |
Adam Conrad |
sssd (Ubuntu Raring): status |
Fix Committed |
Fix Released |
|
