[apparmor] Problems with IPv6

John Johansen john.johansen at canonical.com
Tue Jun 25 04:39:07 UTC 2013


On 06/24/2013 08:09 PM, Simon Deziel wrote:
> Hi Aaron,
> 
> On 13-06-24 10:28 PM, Aaron Lewis wrote:
>> Hi guys,
>>
>> I have two problems when IPv6 is enabled,
>>
>> A. for chrome browser,
>>
>> I don't know how to define a "sub" profile without knowing absolute
>> path of Chrome_IOThread
>>
>> [  771.956817] type=1400 audit(1372127142.646:1647): apparmor="DENIED"
>> operation="create" parent=1 profile="/usr/lib/chromium/chromium"
>> pid=4878 comm="Chrome_IOThread" family="inet6" sock_type="dgram"
>> protocol=0
> 
> Inet6 and dgram would point to UDPv6 but protocol 0 is surprising me so
> let's hear from someone else ;)
> 
protocol 0 is the default if only one protocol exists for a family and type.
So its actually not unusual





More information about the AppArmor mailing list