Every time has to use this command to read dump using tcpdump "sudo apparmor_parser -R > /etc/apparmor.d/usr.sbin.tcpdump"

[Mitul]

When i try to read file using tcpdump, it says "Permission denied" even though it has all the permission. But if i run this command "sudo apparmor_parser -R > /etc/apparmor.d/usr.sbin.tcpdump", then it reads from file.

[Seth Arnold (seth-arnold)]

Hello Mitul,

You can check dmesg or /var/log/syslog or /var/log/audit/audit.log for DENIED lines from AppArmor that you can then add to the profile if you wish. What files were you trying to read?

Note that the command line as given here is incorrect; you either re-directed the file /etc/apparmor.d/usr.sbin.tcpdump as input using < or left it off entirely. (Since the shell redirections are handled before sudo executes, probably you left it off entirely.)

Thanks

[Launchpad Janitor (janitor)]

[Expired for tcpdump (Ubuntu) because there has been no activity for 60 days.]