Project

General

Profile

Tâche #32948

Scénario #32605: Seth 2.7.2 - DENIED apparmor pour le dossier conf.d

Tester

Added by Matthieu Lamalle 2 months ago. Updated about 1 month ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Start date:
07/16/2021
Due date:
% Done:

100%

Remaining (hours):
0.0

History

#1 Updated by Emmanuel GARETTE 2 months ago

1/ vérifier si la correction apparmor est bien prise en compte :

root@dc1:~# touch /etc/samba/conf.d/full_audit.global
root@dc1:~# systemctl restart bind9.service 

Avant mise à jour nous avons l'erreur :

[ven. juil. 16 14:37:30 2021] audit: type=1400 audit(1626439054.444:31): apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/etc/samba/conf.d/full_audit.global" pid=27696 comm="isc-worker0000" requested_mask="r" denied_mask="r" fsuid=111 ouid=0

Après mise à jour ce message doit disparaitre.

#2 Updated by Ludwig Seys 2 months ago

  • Assigned To set to Ludwig Seys

#3 Updated by Ludwig Seys 2 months ago

  • Status changed from Nouveau to En cours

#4 Updated by Ludwig Seys 2 months ago

  • Status changed from En cours to À valider

#5 Updated by Ludwig Seys 2 months ago

  • Status changed from À valider to Résolu

#6 Updated by Joël Cuissinat about 1 month ago

OK (NB : le template s'appelle named.apparmor.conf)

root@dc1:~# cat /etc/apparmor.d/local/usr.sbin.named
# original file superseded by creole
/run/samba/winbindd/pipe rw,
/etc/samba/conf.d/** r,

#7 Updated by Joël Cuissinat about 1 month ago

  • Status changed from Résolu to Fermé
  • % Done changed from 0 to 100
  • Remaining (hours) set to 0.0

Also available in: Atom PDF