The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
192 views

New Dovecot install not allowing login, giving permissions error despite saying that permissions “appear ok”

I'm installing dovecot onto a Virtualbox VM running Ubuntu Server 64-bit 14.04 guest. Dovecot itself is being installed into a Docker container (I'm not sure that that's relevant here, but am noting ...
0
votes
0answers
14 views

Allow folder in all AppArmor profiles?

I want to put all my modified ubuntu server configurations files (/etc/...) in one folder via symbolic links. However, it's annoying having to write the same line in all apparmor profiles. Is there ...
2
votes
1answer
672 views

mysql wont start after update (seems an apparmor issue)

I just updated mysql-server to 5.5.35-0ubuntu0.12.04.1 and MySQL does not restart anymore. dmesg shows following errors: [ 832.490460] type=1400 audit(1392612759.575:31): apparmor="STATUS" ...
2
votes
0answers
287 views

Apparmor denies ntpd access to its own logs

ntpd complains that it cannot access its own logs # ntpd -qgddd ... 11 Sep 16:23:00 ntpd[7262]: can't open /var/log/ntpstats/peerstats.20130911: Permission denied ... 11 Sep 16:23:01 ntpd[7262]: ...
0
votes
2answers
200 views

apparmor blocking mysql start

I'm running ubuntu 12.04 and moved the datadir for my mysql server (retaining same ownerships and permissions) from /var/lib/mysql to /u/apps/mysql in /etc/mysql/my.cnf, then I updated ...
0
votes
1answer
72 views

Is there a way to restore iptables rules to the ones set after a fresh installation?

I have a server which is being kept behind a corporate firewall, so the corporate firewall takes care of all firewall issues. After making a fresh installation of the server, and setting the ...
0
votes
0answers
193 views

MySQL won't start, reinstall fails on Ubuntu 12.04

My problem started yesterday night when I tried to change the my.cnf config on my ubuntu 12.04 x64 System. I simply tried to changed the bind-address parameter from 127.0.0.1 to 0.0.0.0. A simple ...
1
vote
1answer
976 views

need to configure BIND server query logging with versions

I've been trying to get BIND server query logging working, creating 3 versions, max 100mb each. The system is SUSE SLES 11. I have found numerous how to articles on the web but none of them do ...
0
votes
1answer
508 views

Best way to set up permissions with nginx + php-fpm on shared hosting?

I'm running a shared hosting server with nginx and php-fpm on Debian. Everything works fine, php-fpm has separate pools for each users running as separate users and they each have their own socks. ...
1
vote
0answers
457 views

Mounting a network file system inside LXC on Ubuntu 12.10

On an Ubuntu 12.10 server, I created an Ubuntu cloud lxc container. In the /var/lib/lxc/MY_CONTAINER/config file, I uncommented the line: lxc.aa_profile = unconfined and started the container. ...
3
votes
1answer
859 views

AppArmor - root: “You do not have enough privilege to read the profile set.”

I'm trying to use AppArmor on a remote hosted Xen server with a custom built kernel. AppArmor appears to be running, but not correctly. For example if I run the following command as root: # ...
3
votes
2answers
761 views

Strict security and virtual host isolation with Nginx?

I currently have an Apache web server set up under which each virtual host is isolated using HTTPD-ITK and the AppArmor module. Each virtual host's workers are setuid/setgid by the server and are ...
4
votes
1answer
56 views

How can I run a command with a specific AppArmor profile/hat?

I'm hoping there exists something like sudo for AppArmor, so I can run something in a context like: aado -hat my-hat command arg arg arg Does this exist?
0
votes
1answer
256 views

gcc sandboxing tool - AppArmor / CHROOT jail on Ubuntu 12.04

We have a Node application as the front end to a C++ sandboxing tool, which compiles code using gcc and outputs the result to the browser. e.g. exec("gcc -o /tmp/test /tmp/test.cpp", function ...
0
votes
1answer
845 views

How do I patch my kernel 3.2 with apparmor kernel patches?

I have Ubuntu 12.04 with kernel 3.2 (64 bits) I downloaded apparmor-2.8.0.tar.gz at https://launchpad.net/apparmor/2.8/2...r-2.8.0.tar.gz After I untar, I go into apparmor-2.8.0/kernel-patches/3.2/ ...
0
votes
0answers
315 views

Can’t start MySQL on Ubuntu 12.04 after restored from innobackupex

I can’t start MySQL on Ubuntu 12.04 after restored backup from innobackupex. Before I tried to restore the db from backup I moved the datadir and got the same problem. With help from google I fixed ...
1
vote
1answer
581 views

How to properly secure Unicorn/RoR server on ubuntu? Or, harden RoR application stack?

I have few Unicorn servers running on Ubuntu 12.04 and I am looking to secure them against exploits which give remote shell. My main concern is, if it makes sense to deploy ModSecurity? Another ...
3
votes
0answers
163 views

Apparmor externally included hats not working

Running apache2 on Ubuntu 12.04, using mod-apparmor for change-hat support. I have installed and verified that change-hat is working but that it is not working for externally included hats like the ...
0
votes
1answer
410 views

Do I need to chroot BIND 9 if I'm using AppArmor? [duplicate]

Possible Duplicate: bind9 in a chroot jail - necessary or not? I'm redoing my external dns servers and thinking about skipping chroot this time. And using apparmor or selinux as an ...
1
vote
1answer
160 views

Ubuntu 10.04 bind9 local zone include files and apparmor

Rather than putting all my zones in one named.conf.local file, I'd like to have them in groups that I can manage as separate files. So, I've tried putting the following into named.conf.local: ...
2
votes
2answers
2k views

MySQL moving ibdata & ib_logfile

I'm trying to move ibdata & ib_logfile on ssd drive. I tried this way, but it don't work: service mysql stop cd /var/lib/ cp -ra mysql mysql_backup cp -a mysql/ibdata1 mysql/ib_logfile* ...
1
vote
1answer
865 views

apparmor on fedora / rhel / centos

My application relies heavily on AppArmor for security. I use Ubuntu to host it myself, but I have gotten requests from others that want to host in on a Fedora or RHEL machine. Now I am aware that ...
1
vote
1answer
577 views

Creating a raw InnoDB disk in Ubuntu 10.04 with LVM

I'm trying to create a 2TB raw partition for MySQL/InnoDB to use on one of my LVM's. I created the raw disk: Disk /dev/mapper/g0-sql: 2190.4 GB, 2190433320960 bytes 255 heads, 63 sectors/track, ...
2
votes
1answer
2k views

mysql init-file config option giving file not found error

I want to have a SQL script run whenever mysql starts but I can't get it working in Ubuntu 11.10. I added a "init-file" option to the mysql config file: > sudo emacs -nw /etc/mysql/my.cnf ... ...
2
votes
2answers
398 views

apparmor not working ubuntu 11.04 insize OpenVZ

so it seems I have everything installed, but apparmor_status gives "apparmor module is not loaded." Also some apparmor scripts check for presence of /sys/module/apparmor and it is not there... Any ...
3
votes
0answers
126 views

apparmor: same profile for multiple apps

so I have: #include <tunables/global> /usr/bin/python2.7 { /** mixrw, deny /** lwk, } /usr/lib/jvm/java-6-openjdk/jre/bin/java { /** mixrw, deny /** lwk, } ...
1
vote
1answer
110 views

AppArmor failing to start

I'm trying to start AppArmor in an openSUSE 11.4 system. I run: rcapparmor start and I always get this error: Starting AppArmor Loading AppArmor module failed Is there any log ...
3
votes
1answer
1k views

Creating a Linux “sandbox” with AppArmor

I'm trying to sandbox a particular Python process, giving it access only to network communications and a select number of files on the file system. I followed the directions on the Ubuntu community ...