Bug 136765

Summary:	apparmor and subdomain (not bootable)
Product:	[openSUSE] SUSE LINUX 10.0	Reporter:	uwe reyer <secur.options>
Component:	AppArmor	Assignee:	Michal Svec <msvec>
Status:	RESOLVED WONTFIX	QA Contact:	Michal Svec <msvec>
Severity:	Normal
Priority:	P5 - None
Version:	unspecified
Target Milestone:	---
Hardware:	i386
OS:	SuSE Linux 10.0
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description uwe reyer 2005-12-02 20:11:58 UTC

dear sirs and madams,

i get following mistake: this is a excerp from my boot.msg:

FATAL: Error inserting subdomain (/lib/modules/2.6.13-15-default/kernel/security/subdomain/subdomain.ko): Resource temporarily unavailable
Loading SubDomain module failed
- could not start SubDomainfailed

i think the kernel 2.6.13-15 doesn´t work with the subdomain correctly.
and an other point: THERE IS NO GOOD MANUAL OR DOCUMENTATION for apparmor !!!
- where can i find it! it´s useless for me to download your manual if i can´t use apparmor .....


best regards,

Comment 1 Dominic W Reynolds 2005-12-03 20:25:42 UTC

Hi, 

  This message may indicate that a module using the LSM api is already loaded. There is a module that ships with SUSE Linx 10.0 that will prevent the subdomain module from loading. 
It's called dazuko and is loaded by the service antivir.

You can ensure that this moule is not present by executing:

rmmod dazuko

as root.

Then run rcsubdomain restart and AppArmor should now be running.

To prevent this module from being loaded at boot time ensure that "dazuko" is not present in the configuration option:

MODULES_LOADED_ON_BOOT

in the file /etc/sysconfig/kernel.

If you do not have this module loaded (or this does not solve your problem) if you can attach your /var/log/boot.msg and /var/log/messages files to this bug entry I can look into situation on your system to troubleshoot in more detail.

As for documentation here are the links for the installation quick start guide and the users guide for AppArmor.

http://www.novell.com/documentation/apparmor/pdfdoc/apparmor_install/apparmor_install.pdf
http://www.novell.com/documentation/apparmor/pdfdoc/apparmor_user/apparmor_user.pdf

I hope this help and sorry that you are having problems.

Comment 2 Forgotten User KSYEYC9iJz 2006-01-04 20:56:49 UTC

Is Bug129675 saying you cannot run both dazuko and app_armour at the same time. I need to be able to scan for virus. Looks like klamav need dazuko. By disabling app_armour my virus scans appear to work. Main concern is email since I communicate with Windows users a lot. Don't want to pass on virus'

Comment 3 Seth R Arnold 2006-02-08 00:00:55 UTC

clamav does not require dazuko to just virus-scan emails.

Comment 6 John R Johansen 2007-11-16 03:42:11 UTC

This will not be fixed for SL10.0.  Stacking with dazuko was added in 10.3 and will be in SLES10SP2