aa-logprof: doesn't work complain mode in new syslog conf(using /var/log/syslog)

Bug #835838 reported by yama
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
Medium
Jamie Strandboge

Bug Description

Ubuntu 11.04

/etc/apparmor/logprof.conf
logfiles = /var/log/audit/audit.log /var/log/messages /var/log/syslog

 It is not read after that when /var/log/messages files are 0 bytes.
Therefore, the /var/log/syslog/ file is not read, and aa-logprof ends.

Revision history for this message
Fumihito YOSHIDA (hito) wrote :

I can reproduce this bug with upgraded natty/oneiric, not clean-installed.

Because clean-installed natty/oneiric does not have /var/log/messages. But if we upgrade maverick -> natty (-> oneiric), that cause 0-byte /var/log/messages.

So, we need change the logfiles entiry.
===============================================================
$ diff -u logprof.conf.orig logprof.conf
--- logprof.conf.orig 2011-04-19 02:36:30.000000000 +0900
+++ logprof.conf 2011-08-28 14:55:56.762774378 +0900
@@ -11,7 +11,7 @@
 [settings]
   profiledir = /etc/apparmor.d /etc/subdomain.d
   inactive_profiledir = /usr/share/doc/apparmor-profiles/extras
- logfiles = /var/log/audit/audit.log /var/log/messages /var/log/syslog
+ logfiles = /var/log/audit/audit.log /var/log/syslog /var/log/messages

   parser = /sbin/apparmor_parser /sbin/subdomain_parser
   ldd = /usr/bin/ldd
===============================================================

Changed in apparmor (Ubuntu):
status: New → Confirmed
summary: - aa-logprof: doesn't work complain mode.
+ aa-logprof: doesn't work complain mode in new syslog conf(using
+ /var/log/syslog)
Changed in apparmor (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
status: Confirmed → In Progress
importance: Undecided → Medium
Changed in apparmor (Ubuntu):
milestone: none → ubuntu-11.10-beta-2
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.7.0~beta1+bzr1774-1ubuntu1

---------------
apparmor (2.7.0~beta1+bzr1774-1ubuntu1) oneiric; urgency=low

  * 0004-adjust-logprof-log-search-order.patch: Adjust the search order to use
    just /var/log/audit/audit.log and /var/log/syslog. (LP: #835838)
  * 0005-lp826914.patch: fix missing multiarch in abstraction/X (LP: #826914)
  * 0006-lp838275.patch: adjust ubuntu-email abstraction for thunderbird 7
    (LP: #838275)
 -- Jamie Strandboge <email address hidden> Fri, 02 Sep 2011 12:30:10 -0500

Changed in apparmor (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.