You need to update your apparmor policy to allow rw access to /var/cache/openafs/**; accesses are performed by the kernel cache manager on behalf of all processes and apparmor's view of the credentials do not line up. MIT's configuration does this as of https://github.com/mit-athena/apparmor-config/commit/e3b34ce4d455574a235bbb8a512ad99f75155bc7
-Ben On Thu, Oct 04, 2018 at 11:49:04AM +0200, Martin Flemming wrote: > > Hi, again ! > > Shortly after i send this mail to the list, one of the user report > back ... same problemes like before ... :-( > > In an old terminal (where afs was running well) everyhing seems to be ok, > create files,folder, pwd... etc) > but for every new one terminal or GUI-Application the AFS-Tree > /afs/desy.de/user/ is not available anymore > > Other directories in /afs/desy.de/ are available ... > > > > My first idea: I've to delete the afs-cache, after the upgrade from 1.8.0 ~ > pre5-1 to 1.8.2, haven't i ? > > > in dmesg we see follow messages > > [42798.792549] audit: type=1400 audit(1538639477.910:42): apparmor="DENIED" > operation="file_perm" profile="/usr/bin/evince" > name="/var/cache/openafs/D81/V166635" pid=29610 comm="evince" > requested_mask="r" denied_mask="r" fsuid=25574 ouid=0 > [42798.792552] audit: type=1400 audit(1538639477.910:43): apparmor="DENIED" > operation="file_perm" profile="/usr/bin/evince" > name="/var/cache/openafs/D80/V165031" pid=29610 comm="evince" > requested_mask="r" denied_mask="r" fsuid=25574 ouid=0 > [42798.795332] audit: type=1400 audit(1538639477.914:44): apparmor="DENIED" > operation="file_perm" profile="/usr/bin/evince" > name="/var/cache/openafs/D81/V166635" pid=29610 comm="evince" > requested_mask="r" denied_mask="r" fsuid=25574 ouid=0 > [42798.795334] audit: type=1400 audit(1538639477.914:45): apparmor="DENIED" > operation="file_perm" profile="/usr/bin/evince" > name="/var/cache/openafs/D80/V165031" pid=29610 comm="evince" > requested_mask="r" denied_mask="r" fsuid=25574 ouid=0 > [42811.588120] audit: type=1400 audit(1538639490.705:46): apparmor="DENIED" > operation="file_perm" profile="/usr/bin/evince" > name="/var/cache/openafs/D71/V146768" pid=29664 comm="EvJobScheduler" > requested_mask="r" denied_mask="r" fsuid=25574 ouid=0 > > > Any further suggestions for debugging ? > > thanks & cheers, > > martin > > On Thu, 4 Oct 2018, Martin Flemming wrote: > > > > > Thanks all for input ! > > > > We will try at first upgrade to > > > > https://launchpad.net/~openafs/+archive/ubuntu/stable (1.8.2) > > > > and see ... if there also problems then we'll report it and switch maybe > > to > > an downgrade https://launchpad.net/~openafs/+archive/ubuntu/stable (1.6.23) > > > > thanks & cheers > > > > Martin > _______________________________________________ > OpenAFS-info mailing list > [email protected] > https://lists.openafs.org/mailman/listinfo/openafs-info _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
