Project

General

Profile

Actions
Copy link

action #7032

closed

appamor doesn't allow ipmitool to be started

Added by coolo almost 10 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
mlin7442
Category:
Regressions/Crashes
Target version:
Sprint 16
Start date:
2015-03-27
Due date:
% Done:

100%

Estimated time:

Description

https://openqa.suse.de/tests/24363/file/autoinst-log.txt shows a permission denied for impi.

This is audit.log

type=SYSCALL msg=audit(1427469538.657:1755): arch=c000003e syscall=59 success=no exit=-13 a0=7fab5001cff0 a1=7fab500209b0 a2=411bd70 a3=7fab55eb9540 items=0 ppid=26169 pid=26176 auid=4294967295 uid=487 gid=65534 euid=487 suid=487 fsuid=487 egid=65534 sgid=65534 fsgid=65534 tty=(none) ses=4294967295 comm="isotovideo" exe="/usr/bin/perl" key=(null)
type=AVC msg=audit(1427469538.669:1756): apparmor="DENIED" operation="exec" parent=26171 profile="/usr/share/openqa/script/worker" name="/usr/bin/ipmitool" pid=26177 comm="isotovideo" requested_mask="x" denied_mask="x" fsuid=487 ouid=0

Not sure what can of worms we open - possibly we have to split ipmi backend in a package of its own to install the profile?

Actions
Copy link

Also available in: Atom PDF