[apparmor] Too much noise

azurit at pobox.sk azurit at pobox.sk
Thu Dec 7 22:00:34 UTC 2017


Hi,

i have this rule in my profile:
owner /etc/passwd r,

Problem is, that application is running under lots of different UIDs  
and all of them are trying to access /etc/passwd (which is not needed,  
only master process, running under root, needs it). How to get rid of  
the noise in the logs? I cannot do 'deny /etc/passwd r' as it will  
deny also root (master process) to access /etc/passwd.

azur





More information about the AppArmor mailing list