I am new to the ways of apparmor, once had to create selinux profiles in CentOS and RHEL, so I think I understand what is going on with...
[ 51.129117] audit: type=1400 audit(1669406835.918:23): apparmor="DENIED" operation="mknod" profile="msmtp" name="/var/log/msmtp.log" pid=1713 comm="sendmail" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
I installed SmartMonTools, then installed msmtp to allow SmartMonTools to send out email alerts on drive status/failures. That is working. But now I noticed the above showing up in the log.
The apparmor is blocking sendmail or msmtpd service from running mknod in creating the log file /var/log/msmtp.log, as a specific 'c' or character based file? Of I believe I need to add a profile to apparmor to allow this? Am I on the right track? How does one do this?
Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230
[Installation] Maybe need an appamor profile?
-
- Posts: 41
- Joined: 2021-12-23 22:22
- FreewheelinFrank
- Global Moderator
- Posts: 2111
- Joined: 2010-06-07 16:59
- Has thanked: 38 times
- Been thanked: 231 times
Re: [Installation] Maybe need an appamor profile?
Hi,
The Debian Wiki might help you with this.
https://wiki.debian.org/AppArmor
As might the Arch Wiki.
https://wiki.archlinux.org/title/AppArmor
As this is a technical issue, and apparmor is used by many distros, you might consider posing the question in the specialist areas at StackExchange or LinuxQuestions.
https://unix.stackexchange.com/question ... d/apparmor
https://www.linuxquestions.org/question ... ecurity-4/
I've given your topic a bump anyway, so it's possible somebody here familiar with the technicalities of apparmor may spot it.
The Debian Wiki might help you with this.
https://wiki.debian.org/AppArmor
As might the Arch Wiki.
https://wiki.archlinux.org/title/AppArmor
As this is a technical issue, and apparmor is used by many distros, you might consider posing the question in the specialist areas at StackExchange or LinuxQuestions.
https://unix.stackexchange.com/question ... d/apparmor
https://www.linuxquestions.org/question ... ecurity-4/
I've given your topic a bump anyway, so it's possible somebody here familiar with the technicalities of apparmor may spot it.