[apparmor] [profile] /etc/cron.daily/logrotate: a couple of DENIED messages.

daniel curtis sidetripping at gmail.com
Wed Nov 9 11:21:39 UTC 2016


Hi Seth,

Thanks for an answer. So these are rules, which I should add to the
/etc/cron.daily/logrotate profile, right?

/var/lib/logrotate/ r,
/var/lib/logrotate/status.clean w,   ## NOTE: in my system there is no such
file - there is only 'status'

/bin/sed mixr,
/bin/mv mixr,

/var/lib/logrotate/* r,
/var/lib/logrotate/ rw,

/etc/logrotate.d/ r,
/etc/logrotate.d/* rw,

It looks okay for you now? Can I use these rules?

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161109/dad2fe33/attachment.html>


More information about the AppArmor mailing list