syslog-ng profile needs capability sys_admin and /proc/kmsg

Bug #148708 reported by John Dong
4
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
Medium
Mathias Gug

Bug Description

Binary package hint: apparmor

syslog-ng with Gutsy's apparmor-profiles doesn't work... Upon investigation, two additional lines are required in the profile:

  capability sys_admin,
  @{PROC}/kmsg r,

After performing these two changes, syslog-ng works as expected.

Related branches

Revision history for this message
Bart Verwilst (verwilst) wrote :

I can confirm this bug, and the provided fix!

Changed in apparmor:
status: New → Confirmed
Mathias Gug (mathiaz)
Changed in apparmor:
assignee: nobody → mathiaz
importance: Undecided → Medium
status: Confirmed → In Progress
Revision history for this message
Kees Cook (kees) wrote :

apparmor (2.1+993-0ubuntu3) gutsy; urgency=low

  [ Mathias Gug ]
  * Add mdns4 resolution to nameservice abstraction. (LP: #148579).
  * Update syslog-ng profile. (LP: #148708).
  * Add xen tls libraries to base abstraction. (LP: #150282).
  * Update cups-client abstraction: add /var/run/cups/cups.sock. (LP: #151269)

  [ Kees Cook ]
  * Adjust KDE abstractions for Ubuntu paths (LP: #148309).

 -- Kees Cook <email address hidden> Fri, 12 Oct 2007 12:54:36 -0700

Changed in apparmor:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.