Bug 1204333 - syslog-ng: Error opening file for writing; filename='/dev/tty1', error='Permission denied (13)'
Summary: syslog-ng: Error opening file for writing; filename='/dev/tty1', error='Permi...
Status: NEW
Alias: None
Product: openSUSE Tumbleweed
Classification: openSUSE
Component: Basesystem (show other bugs)
Version: Current
Hardware: x86-64 openSUSE Tumbleweed
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: peter czanik
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-10-15 10:58 UTC by Michael Hirmke
Modified: 2023-03-10 09:39 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Hirmke 2022-10-15 10:58:28 UTC 
Yesterday I updated my Tumbleweed machine after a few weeks of vacation.
Since then I get this error message every so often:
syslog-ng: Error opening file for writing; filename='/dev/tty1', error='Permission denied (13)'

I checked the syslog-ng apparmor file, but it still contains

  /dev/tty1 rw,

ls -l /dev/tty1

crw--w---- 1 root tty     4,  1 Oct 15 12:43 /dev/tty1

I'm not sure, if and how the permissions for /dev/tty1 have been changed, though. They seem to be identical on other machines, where syslog doesn't give that error message.
Comment 1 Marcus Meissner 2022-10-15 12:30:41 UTC 
any audit DENIED records from apparmor for this path?

/var/log/audit/audit.log
Comment 2 Michael Hirmke 2022-10-15 14:17:19 UTC 
yes:

type=AVC msg=audit(1665843310.952:325): apparmor="DENIED" operation="open" profile="syslog-ng" name="/dev/tty1" pid=8417 comm="syslog-ng" requested_mask="ac" denied_mask="ac" fsuid=0 ouid=0
Comment 3 Michael Hirmke 2023-01-28 10:25:58 UTC 
So what to do with this problem?
aa-logprof doesn't list it despite the according autdit.log lines.