LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian
Reload this Page Apparmor messages filling dmesg log.
User Name
Password
Debian This forum is for the discussion of Debian Linux.

Notices


Reply
  Search this Thread
Old 04-20-2022, 10:28 PM   #1
TsVk!
LQ Newbie
 
Registered: Jul 2016
Location: Australia
Distribution: Debian
Posts: 19

Rep: Reputation: Disabled
Apparmor messages filling dmesg log.

Hi,

Apparmor is spamming my dmesg log with denied messages. I don't know if this is a configuration issue or something else, I've been unable to find in research the solution.

Here's a short sample:

Code:
[1816103.345912] audit: type=1400 audit(1650324911.927:1347): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.glaXzPhU" pid=10027 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816103.345970] audit: type=1400 audit(1650324911.927:1348): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.gl5DeVgz" pid=10027 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816103.345973] audit: type=1400 audit(1650324911.927:1349): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.gl5DeVgz" pid=10027 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816119.818910] audit: type=1400 audit(1650324928.400:1350): apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" name="/tmp/xauth-10143-_0" pid=10052 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=10143 ouid=10143
[1816119.869783] audit: type=1400 audit(1650324928.452:1351): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/proc/10071/comm" pid=10071 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=10143 ouid=10143
[1816119.918873] audit: type=1400 audit(1650324928.500:1352): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/proc/10071/comm" pid=10071 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=10143 ouid=10143
[1816120.040326] audit: type=1400 audit(1650324928.620:1353): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glX9nvTG" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.040976] audit: type=1400 audit(1650324928.624:1354): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glUxJf8s" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.041070] audit: type=1400 audit(1650324928.624:1355): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.gl1Ey1mf" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.041152] audit: type=1400 audit(1650324928.624:1356): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glyYXOB1" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.041224] audit: type=1400 audit(1650324928.624:1357): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glpYxDQN" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650308] audit: type=1400 audit(1650325143.234:1358): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.glXdv3tA" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650312] audit: type=1400 audit(1650325143.234:1359): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.glXdv3tA" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650339] audit: type=1400 audit(1650325143.234:1360): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.glngDtWI" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650341] audit: type=1400 audit(1650325143.234:1361): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.glngDtWI" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816383.469416] audit: type=1400 audit(1650325192.059:1362): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.gl7mu2NB" pid=10411 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816383.469420] audit: type=1400 audit(1650325192.059:1363): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.gl7mu2NB" pid=10411 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
Any ideas on how to stop this appreciated.

Thanks
Last edited by TsVk!; 04-20-2022 at 10:30 PM.
 
Old 04-21-2022, 12:22 AM   #2
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
It's just logging things.
Have you looked at apparmor documentation how to configre its logging behavior?

Quote:
Originally Posted by TsVk! View Post
Hi,

Apparmor is spamming my dmesg log with denied messages. I don't know if this is a configuration issue or something else, I've been unable to find in research the solution.

Here's a short sample:

Code:
[1816103.345912] audit: type=1400 audit(1650324911.927:1347): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.glaXzPhU" pid=10027 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816103.345970] audit: type=1400 audit(1650324911.927:1348): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.gl5DeVgz" pid=10027 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816103.345973] audit: type=1400 audit(1650324911.927:1349): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.gl5DeVgz" pid=10027 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816119.818910] audit: type=1400 audit(1650324928.400:1350): apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" name="/tmp/xauth-10143-_0" pid=10052 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=10143 ouid=10143
[1816119.869783] audit: type=1400 audit(1650324928.452:1351): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/proc/10071/comm" pid=10071 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=10143 ouid=10143
[1816119.918873] audit: type=1400 audit(1650324928.500:1352): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/proc/10071/comm" pid=10071 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=10143 ouid=10143
[1816120.040326] audit: type=1400 audit(1650324928.620:1353): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glX9nvTG" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.040976] audit: type=1400 audit(1650324928.624:1354): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glUxJf8s" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.041070] audit: type=1400 audit(1650324928.624:1355): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.gl1Ey1mf" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.041152] audit: type=1400 audit(1650324928.624:1356): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glyYXOB1" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816120.041224] audit: type=1400 audit(1650324928.624:1357): apparmor="ALLOWED" operation="file_mmap" profile="libreoffice-soffice" name="/tmp/.glpYxDQN" pid=10071 comm="soffice.bin" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650308] audit: type=1400 audit(1650325143.234:1358): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.glXdv3tA" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650312] audit: type=1400 audit(1650325143.234:1359): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.glXdv3tA" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650339] audit: type=1400 audit(1650325143.234:1360): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.glngDtWI" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816334.650341] audit: type=1400 audit(1650325143.234:1361): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/home/DOMAIN/user/.nv/.glngDtWI" pid=10374 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816383.469416] audit: type=1400 audit(1650325192.059:1362): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.gl7mu2NB" pid=10411 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
[1816383.469420] audit: type=1400 audit(1650325192.059:1363): apparmor="DENIED" operation="file_mmap" profile="thunderbird//sanitized_helper" name="/tmp/.gl7mu2NB" pid=10411 comm="firefox-esr" requested_mask="m" denied_mask="m" fsuid=10143 ouid=10143
Any ideas on how to stop this appreciated.

Thanks
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
where are /var/log/dmesg and /var/log/messages sryzdn Linux - Newbie 4 02-09-2015 09:35 PM
Difference between ouput of dmesg and content of /var/log/dmesg Sayan Acharjee Linux - General 1 09-21-2011 10:42 AM
dmesg vs /var/log/dmesg drManhattan Linux - Newbie 2 08-07-2011 05:28 AM
dmesg (command) and /var/log/dmesg are different? Oxagast Linux - Software 2 07-10-2006 05:50 AM
Boot messages not the same as "dmesg" or "/var/log/messages"? massai Linux - General 5 03-10-2004 12:18 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Debian

All times are GMT -5. The time now is 10:56 PM.

Contact Us - Advertising Info - Rules - Privacy - LQ Merchandise - Donations - Contributing Member - LQ Sitemap -
Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration