[Apparmor-general] permission denied at boot, but is fine later on?

[Per Jessen]

Per Jessen wrote:

> This is an opensuse 11.0 system.
> On boot-up, I see the following message in the audit log:
> 
> type=APPARMOR_DENIED msg=audit(1224667576.964:12):
> operation="inode_permission" requested_mask="rw::" denied_mask="r::"
> fsuid=0 name="/var/log/bwbemag" pid=2739 profile="/sbin/syslog-ng"
> 
> I tried doing an aa-genprof on /sbin/syslog-ng, but that changed
> nothing.  When I restarted syslog-ng, I didn't get another DENIED
> message.

Okay, not sure why I didn't get another message, but the permissions
didn't change. 

What I still don't now is why aa-genprof didn't change the profile for
me?  I'm beginning to think "bug".


/Per Jessen, Zürich