Bug 156727

Summary: Sub Domain fails to load modules because they eist.
Product: [openSUSE] SUSE LINUX 10.0 Reporter: Forgotten User KSYEYC9iJz <forgotten_KSYEYC9iJz>
Component: AppArmorAssignee: Dominic W Reynolds <dreynolds>
Status: RESOLVED WONTFIX QA Contact: Dominic W Reynolds <dreynolds>
Severity: Normal    
Priority: P5 - None    
Version: unspecified   
Target Milestone: ---   
Hardware: i386   
OS: SuSE Linux 10.0   
Whiteboard:
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Forgotten User KSYEYC9iJz 2006-03-09 21:02:10 UTC
Hardware is Intel P3 (866MHHZ), 512 ram, 80 GB disk with second 80GB disc with XP Home. Grub boot loader. SUSE 10.0 (Linux linux 2.6.13-15.8-default #1 Tue Feb 7 11:07:24 UTC 2006 i686 i686 i386 GNU/Linux)


Get the following message at boot up.

Loading SubDomain module done
Mounting subdomainfs on /subdomain done
Disabling OWLSM extension done
Rebuilding certificate cache done
Loading SubDomain profiles /sbin/subdomain_parser: Unable to add
"/lib/ld-2.3.2.so".  Profile already exists
 Profile /etc/subdomain.d/lib.ld-2.3.2.so failed to load
/sbin/subdomain_parser: Unable to add "/lib/ld-2.4.0.so".  Profile already
exists

Search only shows one copy of lib-2.3.2.so an ls-2.4.0.so

Originally reported on bug 153952, was asked to report as separate bug.
Comment 1 Steve Beattie 2006-04-24 22:26:35 UTC
Ugh, my apologies that this issue got lost in the SL10.1 noise.

The messages you're seeing are claiming that there's already policy loaded for "/lib/ld-2.3.2.so" and "/lib/ld-2.4.0.so". Other policy in /etc/subdomain.d/ should have loaded successfully: you can examine the contents of /subdomain/profiles to see which are loaded.

I'm curious how /etc/subdomain.d/lib.ld-2.3.2.so got generated -- IIRC, /etc/subdomain.d/lib.ld-2.2.so should contain the canonical list of ld.so's. Can you give a directory listing of /etc/subdomain.d/ ?
Comment 2 Seth R Arnold 2006-04-24 23:08:37 UTC
Similarly, the contents of your /etc/subdomain.d/lib.ld-2.3.2.so may give a hint how this extra file was generated.

Incidently, only the profiles contained in this profile failed to load; the other profiles in /etc/subdomain.d/ loaded fine. Your acroread problem, mentioned in the other bug report (thanks for the new bug report), may be addressed either by putting acroread into learning mode via "aa-complain acroread" or by removing the acroread profile from /etc/subdomain.d/, and running /etc/init.d/boot.subdomain restart.

Putting acroread into "learning mode" will simply report failures to /var/log/messages, where the "logprof" tool (or the yast front end, "update profiles wizard") will notice these rejections and walk you through updating your AppArmor policy to allow or deny whatever you wish.
Comment 3 Forgotten User KSYEYC9iJz 2006-04-26 15:45:30 UTC
I'm not sure how the /etc/subdomain.d/lib.ld-2.3.2 got there. I looked after receiving this bug update and it is not there now. I had to reinstall my system (bad disk) about two weeks ago and the errors have dissappeared except fro the Adobe problem. I will remove that entry as you suggest. Contents of my /etc/subdomain.d directory:

/etc/subdomain.d> ls
abstractions
bin.netstat
bin.ping
bin.traceroute
lib.ld-2.2.so
opt.gnome.bin.evolution-2.4
opt.gnome.bin.gaim
opt.gnome.lib.evolution-data-server-1.2.evolution-data-server-1.4
opt.gnome.lib.GConf.2.gconfd-2
opt.MozillaFirefox.bin.firefox.sh
opt.MozillaFirefox.lib.firefox-bin
opt.MozillaFirefox.lib.mozilla-xremote-client
program-chunks
sbin.klogd
sbin.syslogd
usr.bin.apropos
usr.bin.ldd
usr.bin.man
usr.bin.opera
usr.bin.procmail
usr.lib.man-db.man
usr.lib.postfix.bounce
usr.lib.postfix.cleanup
usr.lib.postfix.flush
usr.lib.postfix.local
usr.lib.postfix.master
usr.lib.postfix.nqmgr
usr.lib.postfix.pickup
usr.lib.postfix.proxymap
usr.lib.postfix.qmgr
usr.lib.postfix.scache
usr.lib.postfix.showq
usr.lib.postfix.smtp
usr.lib.postfix.smtpd
usr.lib.postfix.tlsmgr
usr.lib.postfix.trivial-rewrite
usr.lib.RealPlayer10.realplay
usr.sbin.httpd2-prefork
usr.sbin.identd
usr.sbin.nscd
usr.sbin.ntpd
usr.sbin.postalias
usr.sbin.postdrop
usr.sbin.postmap
usr.sbin.postqueue
usr.sbin.sendmail
usr.sbin.squid
usr.sbin.sshd
usr.X11R6.bin.acroread
usr.X11R6.bin.ethereal


Thanks for the help and I guess we can close this bug report.
Comment 4 Dominic W Reynolds 2006-05-03 18:31:28 UTC
Closed per reporter feedback. Unkown how the system got into this state.