[Bug 1416039] [NEW] Broken apparmor profile

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Robie Basak (racb):

I enabled apparmor profile for squid3 by removing symlink in
/etc/apparmor.d/disable

This broke squid, even "squid3 -z" was failing with:
assertion failed: Kid.cc:39: "cpid > 0"

and I saw the following apparmor message:
apparmor="DENIED" operation="exec" profile="/usr/sbin/squid3" name="/usr/sbin/squid3" pid=23413 comm="squid3" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

This can be worked around by adding the following line to /etc/apparmor.d/usr.sbin.squid3:
/usr/sbin/squid3 ix,

** Affects: squid3 (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
Broken apparmor profile
https://bugs.launchpad.net/bugs/1416039
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.