Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" #6064

Open
martinpitt opened this issue Mar 11, 2024 · 1 comment
Open

apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" #6064

martinpitt opened this issue Mar 11, 2024 · 1 comment
Labels
knownissue

Comments

@martinpitt
Copy link
Member

Downstream report: https://launchpad.net/bugs/2056768
martinpitt added a commit to martinpitt/bots that referenced this issue Mar 12, 2024
@martinpitt
naughty: Add ubuntu-stable pattern for rsyslog AppArmor regression
a661211 
Known issue cockpit-project#6064
Downstream report: https://launchpad.net/bugs/2056768
@cockpituous
Copy link
Contributor

cockpituous commented Mar 12, 2024 •
edited

ubuntu-stable
Ooops, it happened again

# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9654/devtools/browser/52d4b674-14de-42f5-aa27-d05ef6e2376c
[0312/152424.760441:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
[0312/152424.778574:ERROR:command_buffer_proxy_impl.cc(131)] ContextResult::kTransientFailure: Failed to send GpuControl.CreateCommandBuffer.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710257066597.149,"url":"http://127.0.0.2:9891/cockpit/@localhost/*/po.js","networkRequestId":"20793.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710257066600.957,"url":"http://127.0.0.2:9891/cockpit/@localhost/*/po.manifest.js","networkRequestId":"20793.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9891/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710257066637.855,"url":"http://127.0.0.2:9891/system/logs#/?tag=check-journal&since=@1710257063"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9891/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710257066637.958,"url":"http://127.0.0.2:9891/system/logs#/?tag=check-journal&since=@1710257063"}
audit: type=1400 audit(1710257063.501:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=694 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-3001-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-3001-FAIL.log.gz
> warning: transport closed: disconnected
umount: /run/user/1000: not mounted.
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1916, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710257063.501:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=694 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [8s on e89e4f921c53]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@7]

First occurrence: 2024-03-12T15:24:31.433004 | revision 5659be39388b3c3b6f5fb7d2fdec1fa40017bb41
Times recorded: 1
Latest occurrences:

  • 2024-03-12T15:24:31.433004 | revision 5659be39388b3c3b6f5fb7d2fdec1fa40017bb41
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9361/devtools/browser/6dab1926-873e-4371-9d23-7a3f2859790f
[0312/152535.047314:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
[0312/152535.053753:ERROR:command_buffer_proxy_impl.cc(131)] ContextResult::kTransientFailure: Failed to send GpuControl.CreateCommandBuffer.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710257137205.751,"url":"http://127.0.0.2:9691/cockpit/@localhost/*/po.manifest.js","networkRequestId":"21309.19"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710257137207.68,"url":"http://127.0.0.2:9691/cockpit/@localhost/*/po.js","networkRequestId":"21309.20"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9691/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710257137278.081,"url":"http://127.0.0.2:9691/system/logs#/?tag=check-journal&since=@1710257133"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9691/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710257137278.376,"url":"http://127.0.0.2:9691/system/logs#/?tag=check-journal&since=@1710257133"}
audit: type=1400 audit(1710257133.802:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=715 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2801-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2801-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1916, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710257133.802:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=715 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [9s on 49aced4b7849]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@5]

First occurrence: 2024-03-12T15:25:42.383229 | revision 5659be39388b3c3b6f5fb7d2fdec1fa40017bb41
Times recorded: 1
Latest occurrences:

  • 2024-03-12T15:25:42.383229 | revision 5659be39388b3c3b6f5fb7d2fdec1fa40017bb41
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9441/devtools/browser/254acb9d-e13e-4352-82b9-8191ad854728
[0313/134832.067218:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710337714586.522,"url":"http://127.0.0.2:9791/cockpit/@localhost/*/po.js","networkRequestId":"21896.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710337714588.089,"url":"http://127.0.0.2:9791/cockpit/@localhost/*/po.manifest.js","networkRequestId":"21896.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9791/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710337714641.815,"url":"http://127.0.0.2:9791/system/logs#/?tag=check-journal&since=@1710337710"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9791/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710337714641.981,"url":"http://127.0.0.2:9791/system/logs#/?tag=check-journal&since=@1710337710"}
> warning: failed to poll tuned {"problem":"disconnected","name":"null","message":"Server has closed the connection.","toString":""}
> warning: failed to poll tuned {"problem":"disconnected","name":"null","message":"Server has closed the connection.","toString":""}
audit: type=1400 audit(1710337710.423:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=718 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2901-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2901-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1916, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710337710.423:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=718 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [11s on 6110a935fdf8]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@6]

First occurrence: 2024-03-13T13:48:41.413077 | revision 5f1f0689f1651ae14f4b943243202066f162770b
Times recorded: 1
Latest occurrences:

  • 2024-03-13T13:48:41.413077 | revision 5f1f0689f1651ae14f4b943243202066f162770b
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9875/devtools/browser/85f54f4c-bda2-426d-8a32-a13b0ec77d0d
[0313/145655.971124:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710341817901.993,"url":"http://127.0.0.2:9591/cockpit/@localhost/*/po.manifest.js","networkRequestId":"26120.19"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710341817903.532,"url":"http://127.0.0.2:9591/cockpit/@localhost/*/po.js","networkRequestId":"26120.20"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9591/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710341817957.59,"url":"http://127.0.0.2:9591/system/logs#/?tag=check-journal&since=@1710341814"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9591/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710341817958.803,"url":"http://127.0.0.2:9591/system/logs#/?tag=check-journal&since=@1710341814"}
audit: type=1400 audit(1710341814.198:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=689 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2701-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2701-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1916, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710341814.198:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=689 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [8s on c6f491d819f6]
not ok 101 test/verify/check-system-journal TestJournal.testLogLevel [ND@4]

First occurrence: 2024-03-13T14:57:02.830063 | revision edc4e7851820b77ab54260cc96961c6f19a210e0
Times recorded: 1
Latest occurrences:

  • 2024-03-13T14:57:02.830063 | revision edc4e7851820b77ab54260cc96961c6f19a210e0
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9645/devtools/browser/e325b481-725a-4cc9-a84a-766da12771e9
[0313/153717.625122:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710344239616.228,"url":"http://127.0.0.2:9891/cockpit/@localhost/*/po.manifest.js","networkRequestId":"20920.19"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710344239622.691,"url":"http://127.0.0.2:9891/cockpit/@localhost/*/po.js","networkRequestId":"20920.20"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9891/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710344239673.144,"url":"http://127.0.0.2:9891/system/logs#/?tag=check-journal&since=@1710344236"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9891/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710344239673.348,"url":"http://127.0.0.2:9891/system/logs#/?tag=check-journal&since=@1710344236"}
audit: type=1400 audit(1710344236.096:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=694 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-3001-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-3001-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1916, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710344236.096:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=694 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [8s on 33177cccb95a]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@7]

First occurrence: 2024-03-13T15:37:24.529641 | revision 8d7bf7bec0febb142bf08b78b82e97223d15a299
Times recorded: 1
Latest occurrences:

  • 2024-03-13T15:37:24.529641 | revision 8d7bf7bec0febb142bf08b78b82e97223d15a299
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9842/devtools/browser/6f2fe22c-e031-4d3a-9b86-257d5493226c
[0313/163656.652088:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
[0313/163656.665329:ERROR:command_buffer_proxy_impl.cc(131)] ContextResult::kTransientFailure: Failed to send GpuControl.CreateCommandBuffer.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710347818627.997,"url":"http://127.0.0.2:9391/cockpit/@localhost/*/po.manifest.js","networkRequestId":"20793.19"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710347818628.831,"url":"http://127.0.0.2:9391/cockpit/@localhost/*/po.js","networkRequestId":"20793.20"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9391/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710347818682.618,"url":"http://127.0.0.2:9391/system/logs#/?tag=check-journal&since=@1710347815"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9391/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710347818682.761,"url":"http://127.0.0.2:9391/system/logs#/?tag=check-journal&since=@1710347815"}
audit: type=1400 audit(1710347815.125:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=692 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2501-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1915, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710347815.125:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=692 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [8s on 8669e2e0a073]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@3]

First occurrence: 2024-03-13T16:37:04.148895 | revision 4f2ba0e81b2c6d3fc57f5d67830ea27ebfd4cd7b
Times recorded: 1
Latest occurrences:

  • 2024-03-13T16:37:04.148895 | revision 4f2ba0e81b2c6d3fc57f5d67830ea27ebfd4cd7b
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9413/devtools/browser/199cd832-0cfe-45fe-bcb4-c10228efec4e
[0313/220921.279023:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
[0313/220921.289208:ERROR:command_buffer_proxy_impl.cc(131)] ContextResult::kTransientFailure: Failed to send GpuControl.CreateCommandBuffer.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710367763210.225,"url":"http://127.0.0.2:9591/cockpit/@localhost/*/po.js","networkRequestId":"20678.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710367763212.589,"url":"http://127.0.0.2:9591/cockpit/@localhost/*/po.manifest.js","networkRequestId":"20678.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9591/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710367763268.058,"url":"http://127.0.0.2:9591/system/logs#/?tag=check-journal&since=@1710367760"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9591/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710367763268.249,"url":"http://127.0.0.2:9591/system/logs#/?tag=check-journal&since=@1710367760"}
audit: type=1400 audit(1710367760.417:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=694 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2701-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2701-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1915, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710367760.417:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=694 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [8s on 4d865f9fa512]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@4]

First occurrence: 2024-03-13T22:09:28.329788 | revision 69d8915c54da59e43e356f10df06e1030d092e2b
Times recorded: 1
Latest occurrences:

  • 2024-03-13T22:09:28.329788 | revision 69d8915c54da59e43e356f10df06e1030d092e2b
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9558/devtools/browser/1be4414b-654a-44cf-ae39-d7c99261e0ca
[0313/221526.854934:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710368128837.764,"url":"http://127.0.0.2:9591/cockpit/@localhost/*/po.js","networkRequestId":"21047.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710368128927.527,"url":"http://127.0.0.2:9591/cockpit/@localhost/*/po.manifest.js","networkRequestId":"21047.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9591/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710368128995.113,"url":"http://127.0.0.2:9591/system/logs#/?tag=check-journal&since=@1710368126"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9591/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710368128995.301,"url":"http://127.0.0.2:9591/system/logs#/?tag=check-journal&since=@1710368126"}
audit: type=1400 audit(1710368126.352:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=687 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2701-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2701-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1915, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710368126.352:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=687 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [8s on 4061b9160a88]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@4]

First occurrence: 2024-03-13T22:15:33.833924 | revision 3d7d98ab0551c39791e7a7562c1bdde5dd68bf78
Times recorded: 1
Latest occurrences:

  • 2024-03-13T22:15:33.833924 | revision 3d7d98ab0551c39791e7a7562c1bdde5dd68bf78
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)

DevTools listening on ws://127.0.0.1:9502/devtools/browser/60c10e6e-3c19-4563-a50a-757ea72fe168
[0314/052753.918640:WARNING:sandbox_linux.cc(418)] InitializeSandbox() called with multiple threads in process gpu-process.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710394076357.079,"url":"http://127.0.0.2:9091/cockpit/@localhost/*/po.js","networkRequestId":"21408.20"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1710394076360.488,"url":"http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js","networkRequestId":"21408.19"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710394076426.581,"url":"http://127.0.0.2:9091/system/logs#/?tag=check-journal&since=@1710394071"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9091/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1710394076426.731,"url":"http://127.0.0.2:9091/system/logs#/?tag=check-journal&since=@1710394071"}
audit: type=1400 audit(1710394071.729:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=720 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2201-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2201-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1647, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1915, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1710394071.729:109): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=720 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [9s on f22e1cf0cd95]
not ok 118 test/verify/check-system-journal TestJournal.testLogLevel [ND@0]

First occurrence: 2024-03-14T05:28:01.986381 | revision 2ccc995ae071f8c40e45e8b5b4cce748f671da7b
Times recorded: 1
Latest occurrences:

  • 2024-03-14T05:28:01.986381 | revision 2ccc995ae071f8c40e45e8b5b4cce748f671da7b
# ----------------------------------------------------------------------
# testLogLevel (__main__.TestJournal.testLogLevel)
[0602/040713.033451:WARNING:sandbox_linux.cc(420)] InitializeSandbox() called with multiple threads in process gpu-process.

DevTools listening on ws://127.0.0.1:9976/devtools/browser/e65f8843-b264-4d86-9427-5c6619beb1a5
[0602/040713.054800:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
[0602/040713.708287:WARNING:runtime_features.cc(730)] AttributionReportingCrossAppWeb cannot be enabled in this configuration. Use --enable-features=ConversionMeasurement,AttributionReportingCrossAppWeb in addition.
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1717301234797.113,"url":"http://127.0.0.2:9191/cockpit/@localhost/*/po.manifest.js","networkRequestId":"20771.19"}
CDP: {"source":"network","level":"error","text":"Failed to load resource: the server responded with a status of 404 (ERROR)","timestamp":1717301234798.266,"url":"http://127.0.0.2:9191/cockpit/@localhost/*/po.js","networkRequestId":"20771.20"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9191/cockpit/@localhost/*/po.manifest.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1717301234841.307,"url":"http://127.0.0.2:9191/system/logs#/?tag=check-journal&since=@1717301230"}
CDP: {"source":"security","level":"error","text":"Refused to execute script from 'http://127.0.0.2:9191/cockpit/@localhost/*/po.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.","timestamp":1717301234841.409,"url":"http://127.0.0.2:9191/system/logs#/?tag=check-journal&since=@1717301230"}
audit: type=1400 audit(1717301230.983:134): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=719 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0
Wrote JS log to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestJournal-testLogLevel-ubuntu-stable-127.0.0.2-2301-FAIL.log.gz
> warning: transport closed: disconnected
Traceback (most recent call last):
  File "/work/make-checkout-workdir/test/common/testlib.py", line 1733, in tearDown
    self.check_journal_messages()
  File "/work/make-checkout-workdir/test/common/testlib.py", line 2023, in check_journal_messages
    raise Error(UNEXPECTED_MESSAGE + "journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1717301230.983:134): apparmor="DENIED" operation="open" class="file" profile="rsyslogd" name="/run/systemd/sessions/" pid=719 comm=72733A6D61696E20513A526567 requested_mask="r" denied_mask="r" fsuid=102 ouid=0

# Result testLogLevel (__main__.TestJournal.testLogLevel) failed
# 1 TEST FAILED [7s on f431d3b6cfc0]
not ok 98 test/verify/check-system-journal TestJournal.testLogLevel [ND@1]

First occurrence: 2024-06-02T04:07:18.595067+00:00 | revision 08a62016d2d9b1ecb0c867e55d8b0d10ec470ebe
Times recorded: 1
Latest occurrences:

  • 2024-06-02T04:07:18.595067+00:00 | revision 08a62016d2d9b1ecb0c867e55d8b0d10ec470ebe

jelly pushed a commit that referenced this issue Mar 13, 2024
@martinpitt @jelly
naughty: Add ubuntu-stable pattern for rsyslog AppArmor regression
7f61a62 
Known issue #6064
Downstream report: https://launchpad.net/bugs/2056768
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
knownissue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@martinpitt @cockpituous