Bug#948499: akonadi.server: apparmor denials
Package: akonadi-server
Version: 4:19.08.3-1
Followup-For: Bug #948499
Dear Maintainer,
I have similar messages for akonadi-server and apparmor:
feb 04 09:30:18 diablo audit[218680]: AVC apparmor="DENIED" operation="unlink" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/akonadi/Akonadi.error.old" pid=218680 comm="akonadiserver" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
feb 04 09:30:18 diablo kernel: audit: type=1400 audit(1580805018.843:261): apparmor="DENIED" operation="unlink" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/akonadi/Akonadi.error.old" pid=218680 comm="akonadiserver" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
feb 04 09:30:18 diablo audit[218680]: AVC apparmor="DENIED" operation="mknod" profile="/usr/bin/akonadiserver" name="/run/user/1000/kcrash_218680" pid=218680 comm="akonadiserver" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
feb 04 09:30:18 diablo kernel: audit: type=1400 audit(1580805018.847:262): apparmor="DENIED" operation="mknod" profile="/usr/bin/akonadiserver" name="/run/user/1000/kcrash_218680" pid=218680 comm="akonadiserver" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
If I remove the first file, I start getting this other one instead:
feb 04 09:33:21 diablo audit[219018]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/akonadi/Akonadi.error" pid=219018 comm="akonadiserver" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
feb 04 09:33:21 diablo kernel: audit: type=1400 audit(1580805201.843:267): apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/akonadi/Akonadi.error" pid=219018 comm="akonadiserver" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
If I remove that one then I get these:
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="mknod" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/akonadi/Akonadi.error" pid=219129 comm="akonadiserver" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="chmod" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="mkdir" profile="/usr/bin/akonadiserver" name="/run/user/1000/akonadi/" pid=219129 comm="akonadiserver" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiserverrc" pid=219129 comm="akonadiserver" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="mkdir" profile="/usr/bin/akonadiserver" name="/run/user/1000/akonadi/" pid=219129 comm="akonadiserver" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219132]: AVC apparmor="DENIED" operation="open" profile="mysqld_akonadi" name="/sys/devices/system/node/" pid=219132 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/akonadi/mysql.conf" pid=219129 comm="akonadiserver" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
feb 04 09:34:22 diablo audit[219129]: AVC apparmor="DENIED" operation="unlink" profile="/usr/bin/akonadiserver" name="/home/mdione/local/share/config/akonadi/akonadiconnectionrc" pid=219129 comm="akonadiserver" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
But at least it's not crashing anymore. Cheers,
-- Marcos.
-- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (700, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.4.0-3-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_CRAP, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:es:fr:it (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages akonadi-server depends on:
ii akonadi-backend-mysql 4:19.08.3-1
ii akonadi-backend-sqlite 4:19.08.3-1
ii libc6 2.29-9
ii libgcc1 1:9.2.1-25
ii libkf5akonadiprivate5abi2 [libkf5akonadiprivate5-19.08] 4:19.08.3-1
ii libkf5akonadiwidgets5abi1 [libkf5akonadiwidgets5-19.08] 4:19.08.3-1
ii libkf5configcore5 5.62.0-1+b1
ii libkf5coreaddons5 5.62.0-1
ii libkf5crash5 5.62.0-1+b1
ii libkf5i18n5 5.62.0-1
hi libqt5core5a 5.12.5+dfsg-7
hi libqt5dbus5 5.12.5+dfsg-7
hi libqt5gui5 5.12.5+dfsg-7
hi libqt5network5 5.12.5+dfsg-7
hi libqt5sql5 5.12.5+dfsg-7
hi libqt5widgets5 5.12.5+dfsg-7
hi libqt5xml5 5.12.5+dfsg-7
ii libstdc++6 9.2.1-25
akonadi-server recommends no packages.
Versions of packages akonadi-server suggests:
ii akonadi-backend-mysql 4:19.08.3-1
pn akonadi-backend-postgresql <none>
ii akonadi-backend-sqlite 4:19.08.3-1
-- no debconf information
--
(Not so) Random fortune:
The technology industry sees itself as in rebellion against corporate
America: not corrupt, not buttoned-up, not empty. In fact, a tech company
can be as corrupt, soulless, and empty as any corporation, but being
unprofessional helps us maintain the belief that we are somehow different
from Wall Street.
-- Shanley Kane
Reply to: