Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

[Installation] Maybe need an appamor profile?

New to Debian (Or Linux in general)? Ask your questions here!
Post Reply
Message
Author
dachshund-digital
Posts: 40
Joined: 2021-12-23 22:22

[Installation] Maybe need an appamor profile?

#1 Post by dachshund-digital »

I am new to the ways of apparmor, once had to create selinux profiles in CentOS and RHEL, so I think I understand what is going on with...

[ 51.129117] audit: type=1400 audit(1669406835.918:23): apparmor="DENIED" operation="mknod" profile="msmtp" name="/var/log/msmtp.log" pid=1713 comm="sendmail" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

I installed SmartMonTools, then installed msmtp to allow SmartMonTools to send out email alerts on drive status/failures. That is working. But now I noticed the above showing up in the log.

The apparmor is blocking sendmail or msmtpd service from running mknod in creating the log file /var/log/msmtp.log, as a specific 'c' or character based file? Of I believe I need to add a profile to apparmor to allow this? Am I on the right track? How does one do this?

User avatar
FreewheelinFrank
Global Moderator
Global Moderator
Posts: 2062
Joined: 2010-06-07 16:59
Has thanked: 38 times
Been thanked: 221 times

Re: [Installation] Maybe need an appamor profile?

#2 Post by FreewheelinFrank »

Hi,

The Debian Wiki might help you with this.

https://wiki.debian.org/AppArmor

As might the Arch Wiki.

https://wiki.archlinux.org/title/AppArmor

As this is a technical issue, and apparmor is used by many distros, you might consider posing the question in the specialist areas at StackExchange or LinuxQuestions.

https://unix.stackexchange.com/question ... d/apparmor

https://www.linuxquestions.org/question ... ecurity-4/

I've given your topic a bump anyway, so it's possible somebody here familiar with the technicalities of apparmor may spot it.

Post Reply