search

tsunghanliu / adsb-box.snap

a snap to build a ADS-B receiver station
28 stars 4 forks source link

adsb-box.graphs-gend flooding dmesg with apparmor DENIED against rrdtool trying to access /etc/fonts/conf.avail/ #45

Open psychosquirrel85 opened 2 years ago

psychosquirrel85 commented 2 years ago

Hi y'all, Thank you for the adsb-box snap project, I really enjoy it, however I'm here to report an issue. I'm not sure if its a biggie or not but its rather annoying to me and possibly others. I hope it's an easy fix. Please let me know if you need any more information.

Environment:

Snap Info: snap-id: AdbSTzNVXj5usNGTZafHKR9qcVyogC5j tracking: latest/edge refresh-date: 2 days ago, at 08:24 CST channels: latest/stable: v1.6 2022-02-14 (532) 70MB - latest/candidate: v1.6 2022-02-14 (532) 70MB - latest/beta: v1.6 2022-02-14 (532) 70MB - latest/edge: v1.6 2022-02-14 (532) 70MB - installed: v1.6 (532) 70MB -

OS Information: NAME="Ubuntu" VERSION="20.04.3 LTS (Focal Fossa)" ID=ubuntu ID_LIKE=debian PRETTY_NAME="Ubuntu 20.04.3 LTS" VERSION_ID="20.04" HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" VERSION_CODENAME=focal UBUNTU_CODENAME=focal

Problem: dmesg and /var/log/syslog are being flooded over and over with the following line: [21448.400792] audit: type=1400 audit(1645130999.772:48819): apparmor="DENIED" operation="open" profile="snap.adsb-box.graphs-gend" name="/etc/fonts/conf.avail/" pid=529736 comm="rrdtool" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

tsunghanliu commented 2 years ago

Hi @psychosquirrel85 ,

Thanks for pointing this out. I'll check the status and update soon.

tsunghanliu commented 2 years ago

I've published v1.6.1 to the edge channel and it should fix this issue.

psychosquirrel85 commented 2 years ago

The initial message is gone but now I have the following:

[200632.268514] audit: type=1400 audit(1645526563.465:3244): apparmor="DENIED" operation="open" profile="snap.adsb-box.piaware" name="/proc/1/attr/current" pid=3641472 comm="netstat" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

tsunghanliu commented 2 years ago

Hi @psychosquirrel85

Do you have all plugs connected? You can use snap connections adsb-box to check. The output would be like these:

$ snap connections adsb-box
Interface         Plug                       Slot               Notes
hardware-observe  adsb-box:hardware-observe  :hardware-observe  manual
mount-observe     adsb-box:mount-observe     :mount-observe     manual
network           adsb-box:network           :network           -
network-bind      adsb-box:network-bind      :network-bind      -
network-observe   adsb-box:network-observe   :network-observe   manual
process-control   adsb-box:process-control   :process-control   manual
raw-usb           adsb-box:raw-usb           :raw-usb           manual
system-observe    adsb-box:system-observe    :system-observe    manual

And, if you have all plugs connected, does this kind of message show periodically or just once when start/restart? If I remember correctly, PiAware may check the system status at startup. Some operations will be blocked, but it shouldn't affect the following operations.

psychosquirrel85 commented 2 years ago

My output looks exactly like yours above

It looks like this may be benign Last message was around midnight CST

[Wed Feb 23 00:46:30 2022] audit: type=1400 audit(1645598790.425:3940): apparmor="DENIED" operation="open" profile="snap.adsb-box.piaware" name="/proc/1/attr/current" pid=37329 comm="netstat" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

tsunghanliu commented 2 years ago

okay, let me know if it happens frequently. Then I'll check it again.