tickets #113108
closed
mx1: /usr/bin/xzegrep: line 219: /usr/bin/egrep: Permission denied
Added by pjessen over 2 years ago.
Updated over 1 year ago.
Description
This looks really odd:
mx1 (mx1.o.o):~ # xzegrep '.cfd' /var/log/mail-20220625.xz
/usr/bin/xzegrep: line 219: /usr/bin/egrep: Permission denied
- Category set to Upstream
- Assignee set to cboltz
- Private changed from Yes to No
Incomplete apparmor profile?
type=AVC msg=audit(1656407996.106:30455): apparmor="DENIED" operation="exec" profile="zgrep" name="/usr/bin/egrep" pid=4719 comm="xzegrep" requested_mask="x"
denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1656407996.106:30456): apparmor="DENIED" operation="open" profile="zgrep" name="/usr/bin/egrep" pid=4719 comm="xzegrep" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0
Christian, I see you created that profile, /etc/apparmor.d/zgrep
:-)
- Status changed from New to Resolved
Right, but it's part of the apparmor-profiles package, therefore bugzilla would have been the better place to report this ;-)
Anyway - fixed in multiple places:
Oh, and while looking at the grep manpage (on Tumbleweed), I accidently found http://bugzilla.opensuse.org/show_bug.cgi?id=1201001 ;-)
Unless you urgently need xzegrep on all our Leap servers, I'll wait a bit and possibly collect some more fixes before I submit an update for 15.4.
cboltz wrote:
Right, but it's part of the apparmor-profiles package, therefore bugzilla would have been the better place to report this ;-)
Agree, but I was too lazy ....
Unless you urgently need xzegrep on all our Leap servers, I'll wait a bit and possibly collect some more fixes before I submit an update for 15.4.
Oh absolutely, I can manage without :-)
Also available in: Atom
PDF