Project

General

Profile

Actions

action #108119

closed

[qe-core] denied appmor record in usr_sbin_smbd

Added by martinsmac about 2 years ago. Updated about 2 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2022-03-10
Due date:
% Done:

100%

Estimated time:
Difficulty:

Description

Observation

openQA test in scenario sle-15-SP3-Server-DVD-Updates-x86_64-mau-apparmor_profile@64bit fails in
usr_sbin_smbd

Test suite description

Testsuite maintained at https://gitlab.suse.de/qa-maintenance/qam-openqa-yml.

Reproducible

Fails since (at least) Build 20220309-1

Expected result

Last good: 20220308-1 (or more recent)

Further details

Always latest result in this scenario: latest

[[https://openqa.suse.de/tests/8307131#step/usr_sbin_smbd/96](https://openqa.suse.de/tests/8307131#step/usr_sbin_smbd/96]]

type=SERVICE_STOP msg=audit(1646906530.127:1633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='unit=smb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1646906530.215:1634): apparmor="DENIED" operation="capable" profile="smbd" pid=4292 comm="smbd" capability=12  capname="net_admin"
type=SERVICE_START msg=audit(1646906530.231:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='unit=smb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1646906530.271:1636): apparmor="DENIED" operation="open" profile="samba-bgqd" name="/proc/4296/fd/" pid=4296 comm="samba-bgqd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=AVC msg=audit(1646906530.283:1637): apparmor="DENIED" operation="capable" profile="samba-bgqd" pid=4296 comm="samba-bgqd" capability=12  capname="net_admin"
Actions #2

Updated by dzedro about 2 years ago

  • Status changed from New to In Progress
  • Assignee set to dzedro
Actions #4

Updated by dzedro about 2 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 100

Added workaround on 15-SP3 to softfail https://bugzilla.suse.com/show_bug.cgi?id=1196850

Actions

Also available in: Atom PDF