Nextcloud-snap: Reduce apparmor-spam?

Created on 8 Jul 2018  路  3Comments  路  Source: nextcloud/nextcloud-snap

My log-files are getting spammed with audit: type=1400 audit(1531032491.884:163): apparmor="DENIED" operation="file_mmap" profile="snap.nextcloud.nextcloud-cron" name="/" pid=5227 comm="php" requested_mask="w" denied_mask="w" fsuid=0 ouid=0

Is there anything that could be done to reduce this?

Most helpful comment

Adding "deny / w," (without the quotes) into /var/lib/snapd/apparmor/profiles/snap.nextcloud.nextcloud-cron seems to have fixed the spam. I'm just mentioning this here in any case anyone else is bothered by the same issue.

All 3 comments

Adding "deny / w," (without the quotes) into /var/lib/snapd/apparmor/profiles/snap.nextcloud.nextcloud-cron seems to have fixed the spam. I'm just mentioning this here in any case anyone else is bothered by the same issue.

I have same problem.

... 
[1830913.447425] audit: type=1400 audit(1557855298.996:6237): apparmor="DENIED" operation="file_mmap" profile="snap.nextcloud.nextcloud-cron" name="/" pid=18465 comm="php" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
[1831516.354614] audit: type=1400 audit(1557855901.878:6238): apparmor="DENIED" operation="file_mmap" profile="snap.nextcloud.occ" name="/" pid=20800 comm="php" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
...

Add deny / w, to

  • /var/lib/snapd/apparmor/profiles/snap.nextcloud.nextcloud-cron
  • /var/lib/snapd/apparmor/profiles/snap.nextcloud.occ

Then, Execute below command to apply the apparmor.

sudo apparmor_parser -r /var/lib/snapd/apparmor/profiles/snap.nextcloud.{nextcloud-cron,occ}

Why does this happen?

Was this page helpful?
0 / 5 - 0 ratings