[apparmor] [profile] lightdm-guest-session: "DENIED"; "mount" and "open" operation, gvfs-fuse-daemo and "/proc/*/net/arp" issue.

Seth Arnold seth.arnold at canonical.com
Thu Feb 9 22:26:19 UTC 2017


On Thu, Feb 09, 2017 at 09:36:58PM +0100, daniel curtis wrote:
> Of course, you're thinking about the
> "/etc/apparmor.d/lightdm-guest-session" file, right? If I decide to silent
> one of these messages, I should edit mentioned profile and add, for
> example, something like:
> 
> deny /proc/[0-9]*/net/arp r,
> 
> Am I correct? But if it's about the second one entry; with "flags=*" and
> "fstype" etc., I don't know how to silence it, because I've never seen
> something like this one before ;- )

Hi Daniel, yes, that's correct. The other entry was a mount rule, you can
silence that with:

  deny mount,

and skip the complicated portions. :)

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20170209/59505557/attachment.pgp>


More information about the AppArmor mailing list