[apparmor] Apache2 Profile Building Failure

[Seth Arnold]

On Sat, Dec 29, 2018 at 06:03:25PM +0000, Moody, David Alan (dam8u) wrote:
> 
> Dec 29 07:21:41 ip-172-31-9-2 kernel: [225623.487271] audit: type=1400
> audit(1546068101.318:6846): apparmor="ALLOWED" operation="connect"
> info="Failed name lookup - disconnected path" error=-13
> profile="/usr/sbin/apache2" name="run/mysqld/mysqld.sock" pid=30086
> comm="apache2" requested_mask="wr" denied_mask="wr" fsuid=33 ouid=106
> 
> Here is the user.sbin.apache2 AppArmor config that aa-genprof created
> 
>     # Last Modified: Sat Dec 29 03:30:28 2018
>     #include <tunables/global>
> 
>     /usr/sbin/apache2 flags=(attach_disconnected,complain) {

Hello David, I'm surprised that you've hit this issue -- the "fix" is to
add the attach_disconnected flag to the profile.

Is it possible that the profile was modified after this specific log line?

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20190102/872b4bdc/attachment.sig>