aa-genprof fails in an lxd instance
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
Fix Released
|
Undecided
|
Christian Boltz | ||
apparmor (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Hello, aa-genprof doesn't run well within an lxd instance:
lxd init # if needed
...
lxc launch ubuntu:18.04
...
lxc exec something -- bash
apt-get install apparmor-utils
aa-genprof something
root@healthy-fly:~# aa-genprof nginx
Writing updated profile for /usr/sbin/nginx.
Setting /usr/sbin/nginx to complain mode.
Traceback (most recent call last):
File "/usr/sbin/
sysctl_
File "/usr/sbin/
with open(path, 'w') as f_out:
PermissionError: [Errno 13] Permission denied: '/proc/
An unexpected error occoured!
For details, see /tmp/apparmor-bugreport-1dp0cm5x.txt
Please consider reporting a bug at https:/
and attach this file.
<pre>Traceback (most recent call last):
File "/usr/sbin/
sysctl_
File "/usr/sbin/
with open(path, 'w') as f_out:
PermissionError: [Errno 13] Permission denied: '/proc/
</pre>
Thanks
ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: apparmor-utils 2.12-4ubuntu5
ProcVersionSign
Uname: Linux 4.15.0-29-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.2
Architecture: amd64
Date: Sat Aug 4 12:01:07 2018
KernLog:
ProcEnviron:
TERM=rxvt-
PATH=(custom, no user)
LANG=C.UTF-8
ProcKernelCmdline: BOOT_IMAGE=
SourcePackage: apparmor
Syslog: Aug 4 11:39:33 healthy-fly dbus-daemon[196]: [system] AppArmor D-Bus mediation is enabled
UpgradeStatus: No upgrade log present (probably fresh install)
Changed in apparmor: | |
status: | Triaged → Fix Committed |
Changed in apparmor: | |
status: | Fix Committed → Fix Released |
Funny enough, aa-logprof doesn't work well in a guest on my system either:
# aa-logprof
Reading log entries from /var/log/syslog.
Updating AppArmor profiles in /etc/apparmor.d.
This could be because the host system is running auditd.
I have no idea what happens if the host isn't running auditd.
Thanks