[apparmor] [profile] /etc/cron.daily/logrotate: a couple of DENIED messages.

[daniel curtis]

Hello Seth,

Thank you very much for an answer. Listen: something strange happened with
two files from /var/log/ directory: kern.log and syslog. I can not open
them (as always) as a normal user - I'm getting "permission denied"
message. There is also a little 'x' on an icons.

Something changed permission. But it wasn't me. Now it looks this way:

$ ls -al /var/log/kern.log
-rw------- 1 root root 0 lis  9 11:44 /var/log/kern.log

$ ls -al /var/log/kern.log.1
-rw-r----- 1 syslog adm 1473399 lis  9 12:27 /var/log/kern.log.1 ## this
file can be opened by me

$ ls -al /var/log/syslog
-rw------- 1 root root 0 lis  9 11:44 /var/log/syslog

I've removed these files (and restart AppArmor via /etc/init.d/) to check
if they will be re-created, but nothing like this happened. It's pretty
strange, because - for example - kern.log file always contains informations
about iptables(8) etc. After system restart situation is the same -
"permission denied". I've opened both files via sudo(8) but there is
everything okay.

What should I do? Use chmod(1) command to set proper owners/permissions? If
yes - what is the proper command? And the last question: what could be
responsible for such situation? Could it be /etc/cron.daily/logrotate
profile? But how...

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161110/a16e521c/attachment.html>