Re: Debian 11: evince and apparmor flood kernel log

From	David Wright <deblis@lionunicorn.co.uk>
Newsgroups	linux.debian.user
Subject	Re: Debian 11: evince and apparmor flood kernel log
Date	2021-09-19 07:00 +0200
Message-ID	<CYX5L-2Kk-5@gated-at.bofh.it> (permalink)
References	<CYt7H-10Z-3@gated-at.bofh.it> <CYv9v-2qE-5@gated-at.bofh.it> <CYGeB-HF-1@gated-at.bofh.it> <CYHX4-1X5-27@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Sat 18 Sep 2021 at 08:43:50 (-0400), Greg Wooledge wrote:
> On Sat, Sep 18, 2021 at 12:54:36PM +0200, Roger Price wrote:
> > In site.local I found
> > 
> >  # The following is a space-separated list of where additional user home
> >  # directories are stored, each must have a trailing '/'. Directories added
> >  # here are appended to @{HOMEDIRS}.  See tunables/home for details. Eg:
> >  #@{HOMEDIRS}+=/srv/nfs/home/ /mnt/home/
> > 
> > where curiously, the apparmor installation seems to have detected my
> > non-common /home and made the necessary addition, but appended to a
> > commented out example.
> 
> It wasn't "detected".  That's the generic site.local file that everyone
> has.  The commented-out line is provided as an example.
> 
> What you're supposed to do is either:
> 
> (a) Uncomment that last line, and edit it.
> 
> (b) Copy that last line, uncomment the copy, and edit the copy.
> 
> I prefer (b) myself.

Yes, it's pretty obvious what's going on if you actually do
"See tunables/home for details", because that has the =
definition that the += is appending to.

<nitpick>

But — the last line of that comment above is actually inconsistent
with how comments are written in /etc/apparmor* files. It should
have a space after the #. #include lines are the only ones that don't.

The other files that look wrong are /etc/apparmor.d/tunables/*.d/*
and /etc/apparmor.d/tunables{kernelvars,sys}.

</nitpick>

Cheers,
David.

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Debian 11: evince and apparmor flood kernel log Roger Price <debian@rogerprice.org> - 2021-09-17 23:00 +0200
  Re: Debian 11: evince and apparmor flood kernel log Reco <recoverym4n@enotuniq.net> - 2021-09-17 23:20 +0200
  Re: Debian 11: evince and apparmor flood kernel log Klaus Singvogel <deb-user-ml@singvogel.net> - 2021-09-18 01:10 +0200
    Re: Debian 11: evince and apparmor flood kernel log Roger Price <debian@rogerprice.org> - 2021-09-18 13:00 +0200
      Re: Debian 11: evince and apparmor flood kernel log Greg Wooledge <greg@wooledge.org> - 2021-09-18 14:50 +0200
        Re: Debian 11: evince and apparmor flood kernel log David Wright <deblis@lionunicorn.co.uk> - 2021-09-19 07:00 +0200

csiph-web