Apparmor problem

bartoszx · 10-24-2010, 11:37 AM

Hi List
I can't find any solution to my problem. It's hard to believe that no one met with a similar problem. Maybe I have something misconfigured.

I set up apparmor profile:
aa-genprof /usr/sbin/apache2
then I set apache2 to complain mode.
I can easly generate correct configuration with command aa-logprof.
However there are lot of apache process that are omited by aa-logprof. for example:

PHP Code:



type=APPARMOR_ALLOWED msg=audit(1287937873.591:69475):  operation="open" pid=29156 parent=29155 profile="/usr/lib/apache2/mpm-prefork/apache2//null-cd8//null-cd9" requested_mask="::r" denied_mask="::r" fsuid=33 ouid=0 name="/etc/ld.so.cache"

type=APPARMOR_ALLOWED msg=audit(1287937873.591:69476):  operation="open" pid=29156 parent=29155 profile="/usr/lib/apache2/mpm-prefork/apache2//null-cd8//null-cd9" requested_mask="::r" denied_mask="::r" fsuid=33 ouid=0 name="/lib/libc-2.11.1.so"

Do you have idea what kind of process is /usr/lib/apache2/mpm-prefork/apache2//null-cd8//null-cd9 and how to add it to apparmor profile?

mihalisla · 10-30-2010, 02:51 PM

try "/usr/lib/apache2/mpm-prefork/apache2//null-cd8//null-cd9 r,
/etc/ld.so.cache r,
/lib/libc-2.11.1.so r, "

and then reload your apparmor profile.
I don't know what this file does....
Hope that helps