skype + apparmor (настроить нормально)

[PolecatZZZ]

Хотел узнать - на офсайте сусе есть готовый профиль для AppArmor, дабы укоротить длинные ручёнки Скайпа и чтобы он не лез, куда ему не следует. Если установить этот профиль, то Скайп не запускается вообще. И если добавлять самому новый профиль в AppArmor - такой же эффект: Скайп перестаёт запускаться. Это такое только у меня так? Или, может быть я что-то делаю не правильно?

[k0da]

Показывайте лог apparmor

Ну и как минимум запустите skype в консоле

On openSUSE 11.1 with this profile settings, skype may not work. The following message is displayed in console: "No protocol specified".

[uptime]

Проверялось на Ubuntu 8.04.1 и Skype 2.0.0.72

[I7E_9og]

ммм! у меня та же проблема!
при запуске скайпа в консоли ничего не пишется!
лог аппармора пока нет возможности получить!

[PolecatZZZ]

Ну и как минимум запустите skype в консоле

Код: Выделить всё

~> skype
Fontconfig error: Cannot load default config file
~>

Показывайте лог apparmor

Если я правильно понял, то это /var/log/audit/audit.log ?
Взял только тот кусок, где присутствует скайп.

Код: Выделить всё

name="/usr/bin/skype" name2="default" pid=6287
type=APPARMOR_STATUS msg=audit(1266354691.046:29): operation="profile_replace" name="/usr/bin/skype" name2="default" pid=6292
type=APPARMOR_DENIED msg=audit(1266354744.650:30): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3327/net/if_inet6" pid=3327 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266354788.902:31): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/bin/skype" pid=6418 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354789.626:32): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/etc/fonts/fonts.conf" pid=6418 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354789.626:33): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le32d4.cache-3" pid=6418 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354789.626:34): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/share/fonts/" pid=6418 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354789.626:35): operation="inode_permission" requested_mask="::w" denied_mask="::w" fsuid=1000 name="/tmp/.X11-unix/X0" pid=6418 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354798.038:36): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/bin/skype" pid=6420 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354798.774:37): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/etc/fonts/fonts.conf" pid=6420 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354798.774:38): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le32d4.cache-3" pid=6420 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354798.774:39): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/share/fonts/" pid=6420 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354798.774:40): operation="inode_permission" requested_mask="::w" denied_mask="::w" fsuid=1000 name="/tmp/.X11-unix/X0" pid=6420 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354817.438:41): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/bin/skype" pid=6435 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354818.063:42): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/etc/fonts/fonts.conf" pid=6435 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354818.063:43): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le32d4.cache-3" pid=6435 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354818.063:44): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/share/fonts/" pid=6435 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266354818.063:45): operation="inode_permission" requested_mask="::w" denied_mask="::w" fsuid=1000 name="/tmp/.X11-unix/X0" pid=6435 profile="/usr/bin/skype"
type=APPARMOR_STATUS msg=audit(1266354864.898:46): operation="profile_replace" name="/bin/ping" name2="default" pid=6527
type=APPARMOR_STATUS msg=audit(1266354864.930:47): operation="profile_replace" name="/sbin/klogd" name2="default" pid=6528
type=APPARMOR_STATUS msg=audit(1266354864.990:48): operation="profile_replace" name="/sbin/syslog-ng" name2="default" pid=6529
type=APPARMOR_STATUS msg=audit(1266354865.046:49): operation="profile_replace" name="/sbin/syslogd" name2="default" pid=6530
type=APPARMOR_STATUS msg=audit(1266354865.082:50): operation="profile_replace" name="/usr/sbin/avahi-daemon" name2="default" pid=6531
type=APPARMOR_STATUS msg=audit(1266354865.119:51): operation="profile_replace" name="/usr/sbin/identd" name2="default" pid=6532
type=APPARMOR_STATUS msg=audit(1266354865.151:52): operation="profile_replace" name="/usr/sbin/mdnsd" name2="default" pid=6533
type=APPARMOR_STATUS msg=audit(1266354865.191:53): operation="profile_replace" name="/usr/sbin/nscd" name2="default" pid=6534
type=APPARMOR_STATUS msg=audit(1266354865.239:54): operation="profile_replace" name="/usr/sbin/ntpd" name2="default" pid=6535
type=APPARMOR_STATUS msg=audit(1266354865.275:55): operation="profile_replace" name="/usr/sbin/traceroute" name2="default" pid=6536
type=APPARMOR_STATUS msg=audit(1266354865.678:56): operation="profile_remove" name="/usr/bin/skype" name2="default" pid=6573
type=APPARMOR_DENIED msg=audit(1266355044.651:57): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3327/net/if_inet6" pid=3327 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266355344.650:58): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3327/net/if_inet6" pid=3327 profile="/usr/sbin/ntpd"
type=DAEMON_END msg=audit(1266355628.380:6869): auditd normal halt, sending auid=0 pid=7000 subj= res=success
type=DAEMON_START msg=audit(1266381237.775:5687): auditd start, ver=1.6.8 format=raw kernel=2.6.25.20-0.5-pae auid=4294967295 pid=3061 res=success
type=APPARMOR_DENIED msg=audit(1266381245.784:12): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3316/net/if_inet6" pid=3316 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266381545.784:13): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3316/net/if_inet6" pid=3316 profile="/usr/sbin/ntpd"
type=DAEMON_END msg=audit(1266381608.843:5688): auditd normal halt, sending auid=0 pid=4320 subj= res=success
type=DAEMON_START msg=audit(1266424248.035:5930): auditd start, ver=1.6.8 format=raw kernel=2.6.25.20-0.5-pae auid=4294967295 pid=2892 res=success
type=APPARMOR_DENIED msg=audit(1266424252.185:12): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266424552.186:13): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266424852.185:14): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266425152.185:15): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266425452.188:16): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266425752.185:17): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266426052.185:18): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266426352.185:19): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266426652.186:20): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266426952.185:21): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266427252.185:22): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266427552.185:23): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266427852.185:24): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266428152.185:25): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3203/net/if_inet6" pid=3203 profile="/usr/sbin/ntpd"
type=DAEMON_END msg=audit(1266428409.775:5931): auditd normal halt, sending auid=0 pid=402 subj= res=success
type=DAEMON_START msg=audit(1266430740.396:8775): auditd start, ver=1.6.8 format=raw kernel=2.6.25.20-0.5-pae auid=4294967295 pid=3040 res=success
type=APPARMOR_DENIED msg=audit(1266430744.417:12): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266431044.416:13): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266431344.416:14): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266431644.416:15): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266431944.416:16): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266432244.416:17): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266432544.416:18): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266432844.416:19): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266433144.416:20): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266433444.416:21): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266433744.416:22): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266434044.416:23): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266434344.416:24): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266434644.416:25): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266434944.416:26): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3386/net/if_inet6" pid=3386 profile="/usr/sbin/ntpd"
type=DAEMON_END msg=audit(1266435108.327:8776): auditd normal halt, sending auid=0 pid=4906 subj= res=success
type=DAEMON_START msg=audit(1266470057.492:7787): auditd start, ver=1.6.8 format=raw kernel=2.6.25.20-0.5-pae auid=4294967295 pid=3013 res=success
type=APPARMOR_DENIED msg=audit(1266470062.551:12): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3342/net/if_inet6" pid=3342 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266470362.551:13): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3342/net/if_inet6" pid=3342 profile="/usr/sbin/ntpd"
type=DAEMON_END msg=audit(1266470475.765:7788): auditd normal halt, sending auid=0 pid=4381 subj= res=success
type=DAEMON_START msg=audit(1266478984.189:4239): auditd start, ver=1.6.8 format=raw kernel=2.6.25.20-0.5-pae auid=4294967295 pid=2720 res=success
type=APPARMOR_DENIED msg=audit(1266478995.945:12): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3405/net/if_inet6" pid=3405 profile="/usr/sbin/ntpd"
type=APPARMOR_DENIED msg=audit(1266479295.942:13): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3405/net/if_inet6" pid=3405 profile="/usr/sbin/ntpd"
type=APPARMOR_STATUS msg=audit(1266479585.974:14): operation="profile_load" name="/usr/bin/skype" name2="default" pid=4538
type=APPARMOR_DENIED msg=audit(1266479595.945:15): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=74 name="/var/lib/ntp/proc/3405/net/if_inet6" pid=3405 profile="/usr/sbin/ntpd"
type=APPARMOR_STATUS msg=audit(1266479596.246:16): operation="profile_replace" name="/usr/bin/skype" name2="default" pid=4543
type=APPARMOR_DENIED msg=audit(1266479605.266:17): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/bin/skype" pid=4560 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266479606.442:18): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/etc/fonts/fonts.conf" pid=4560 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266479606.442:19): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/var/cache/fontconfig/3830d5c3ddfd5cd38a049b759396e72e-le32d4.cache-3" pid=4560 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266479606.442:20): operation="inode_permission" requested_mask="::r" denied_mask="::r" fsuid=1000 name="/usr/share/fonts/" pid=4560 profile="/usr/bin/skype"
type=APPARMOR_DENIED msg=audit(1266479606.442:21): operation="inode_permission" requested_mask="::w" denied_mask="::w" fsuid=1000 name="/tmp/.X11-unix/X0" pid=4560 profile="/usr/bin/skype"

[PolecatZZZ]

Ну дык что?

[k0da]

PolecatZZZ
а попробуйте профиль из дистрибутивного apparmor-profiles

[PolecatZZZ]

PolecatZZZ
а попробуйте профиль из дистрибутивного apparmor-profiles

aa-enforce skype - так нормально будет?