similar to: Apparmor problem

Last week, Debian testing (Buster) added apparmor to the list of dependencies for its latest kernel release, apparently because systemd needs it.  Recently, I noticed my first casualty - bind9 - due to apparmor failures with bind_dlz. Here is the initial journalctl results: Nov 23 10:12:12 debpdc named[16080]: starting BIND 9.10.6-Debian <id:9d1ea0b> -f -u bind Nov 23 10:12:12 debpdc

https://bugs.freedesktop.org/show_bug.cgi?id=103689 Bug ID: 103689 Summary: there is an exploitable page fault that can be reliably triggered from the chromium sandbox can possibly lead to remote attackers causing a denial of service condition or possibly running system code. Product: xorg

Hello all, I am using dovecot on Debian stretch, with AppArmor, and I have this audit log: Mar 16 11:25:10 mail kernel: audit: type=1400 audit(1521199510.705:580): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib/dovecot/auth" name="var/cache/nscd/hosts" pid=26797

From Ubuntu 14.04, I have installed Samba 4.1.6 and bind 9.9.5 and have them working together as per https://wiki.samba.org/index.php/DNS_Backend_BIND To make it work I had to add the following overrides to /etc/apparmor.d/local/usr.sbin.named: # Samba4 DLZ and Active Directory Zones /usr/lib/x86_64-linux-gnu/samba/** rm, /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/** rm,

On 15/05/2019 17:57, durwin at mgtsciences.com wrote: > > > > May 14 14:22:32 audit[2117]: AVC apparmor="DENIED" > operation="file_lock" > > > profile="/usr/sbin/named" name="/var/lib/samba/private/dns.keytab" > > > pid=2117 comm="isc-worker0000" requested_mask="k" denied_mask="k" > > >

I am trying to get DDNS working, so workstations can update their ip. The domain is msi.mycompany.com The DC server works, as well as group policies. I set rights to these files > chgrp bind /var/lib/samba/private/ > chmod 750 /var/lib/samba/private/ > chgrp bind /var/lib/samba/private/dns.keytab > chmod 640 /var/lib/samba/private/dns.keytab journalctl shows this. May 14 14:22:32

On Sun, 16 Oct 2016 12:38:00 -0500 Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > I am working on my second Ubuntu 16.04.1LTS running Samba 4.5.0 with > Bind9_DLZ. > > I have one machine just like this one. Same hardware, same software > setup. First machine is working fine. > > At the moment this (second) machine is not joined to the other

Hello, I think I submitted this before, but I am not sure this has been addressed I am using AppArmor with Dovecot, without any issue. However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See: ------------ Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap"

On 2018-12-09 23:13, Timo Sirainen wrote: > On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot <dovecot at dovecot.org> > wrote: >> >> Hello, >> >> I think I submitted this before, but I am not sure this has been >> addressed >> >> I am using AppArmor with Dovecot, without any issue. >> >> However, I think there is a bug in the

On 2016-10-16 12:55, Rowland Penny via samba wrote: > On Sun, 16 Oct 2016 12:38:00 -0500 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > >> I am working on my second Ubuntu 16.04.1LTS running Samba 4.5.0 with >> Bind9_DLZ. >> >> I have one machine just like this one. Same hardware, same software >> setup. First machine is

Hello Timo, I will try this evening. Kind regards, Andr?. On 10 December 2018 07:56:26 GMT+00:00, Timo Sirainen <tss at iki.fi> wrote: >On 10 Dec 2018, at 7.50, Andr? Rodier <andre at rodier.me> wrote: >> >> On 2018-12-09 23:13, Timo Sirainen wrote: >>> On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot ><dovecot at dovecot.org> wrote:

> From: Rowland penny via samba <samba at lists.samba.org> > To: samba at lists.samba.org > Date: 05/14/2019 02:50 PM > Subject: Re: [Samba] Workstations cannot update DNS > Sent by: "samba" <samba-bounces at lists.samba.org> > > On 14/05/2019 21:36, Durwin via samba wrote: > > I am trying to get DDNS working, so workstations can update their ip.

Hello, I've running Ubuntu-14.04 as my host and my guest. I've been trying to get guest to host communication set up by configuring a virtio-serial device. My xml file contains: <channel type='unix'> <source mode='bind' path='/home/dave/vm1.agent'/> <target type='virtio' name='vm1'/> </channel> When I start up

On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot <dovecot at dovecot.org> wrote: > > Hello, > > I think I submitted this before, but I am not sure this has been addressed > > I am using AppArmor with Dovecot, without any issue. > > However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See: > > ------------

On 10 Dec 2018, at 7.50, Andr? Rodier <andre at rodier.me> wrote: > > On 2018-12-09 23:13, Timo Sirainen wrote: >> On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot <dovecot at dovecot.org> wrote: >>> Hello, >>> I think I submitted this before, but I am not sure this has been addressed >>> I am using AppArmor with Dovecot, without any issue.

Hi, I ran into some trouble last night when setting up samba (4.1.5) with bind 9.9 as the backend. I followed the instructions on the wiki but found that the apparmor settings that are suggested don't actually work (at least for me running Ubuntu 13.10). Just putting it here for others that may experience the same issue and to check that I haven't done something silly. If what I've

Hai, A few things to add/check. For that test with that pc: this part from the previous mail. Jun 27 10:55:07 server5-ad dhcpd[2525]: Release: IP: 192.168.14.198 Jun 27 10:55:07 server5-ad dhcpd[2525]: execute_statement argv[0] = /usr/local/bin/dhcp-dyndns.sh Jun 27 10:55:07 server5-ad dhcpd[2525]: execute_statement argv[1] = delete Jun 27 10:55:07 server5-ad dhcpd[2525]: execute_statement

Hi Daniel, I noticed that the patch "Add support for hotplug/unplug of disk devices in LXC" you wrote had been merged into libvirt of version 1.0.2. But when I used this function, it report an error with details as following: ubuntu@lxc:~$ vir attach-device instance-0000002c disk.xml --config error: Failed to attach device from disk.xml error: Unable to create device

I added libvirt-users@redhat.com back to the Cc for this response. Please don't remove the list address when responding to postings on a mailing list. A message to the list is *much* more likely to reach someone who knows the answer than is a private message to a single person. On 3/26/19 10:03 AM, Harsh Gondaliya wrote: > Mar 26 19:25:01 dpdk-OptiPlex-5040 libvirtd.service: 20423:

Hi Stephan, > Normally, Dovecot permission errors are more helpful than that. So, > this > error message in itself is a bit of a bug: I'm glad to h've been able to help with this beta-test ;-) > About the cause of this error: keep in mind that the whole directory > path needs read/execute permission, not only the leaf directory. Have checked. They are... > You