[OpenAFS] problems with ubuntu 18.04 client

[Benjamin Kaduk]

You need to update your apparmor policy to allow rw access to
/var/cache/openafs/**; accesses are performed by the kernel cache manager
on behalf of all processes and apparmor's view of the credentials do not
line up.  MIT's configuration does this as of
https://github.com/mit-athena/apparmor-config/commit/e3b34ce4d455574a235bbb8a512ad99f75155bc7

-Ben

On Thu, Oct 04, 2018 at 11:49:04AM +0200, Martin Flemming wrote:
> 
> Hi, again !
> 
> Shortly after i send this mail to the list, one of the user report 
> back ... same problemes like before ... :-(
> 
> In an old  terminal (where afs was running well) everyhing seems to be ok, create files,folder, pwd... etc) 
> but for  every new one terminal or GUI-Application the  AFS-Tree /afs/desy.de/user/  is not available anymore
> 
> Other directories in /afs/desy.de/ are available ...
> 
> 
> 
> My first idea: I've to delete the afs-cache, after the upgrade from 1.8.0 ~ pre5-1 to 1.8.2, haven't i ?
> 
> 
> in dmesg we see follow messages
> 
> [42798.792549] audit: type=1400 audit(1538639477.910:42): apparmor="DENIED" operation="file_perm" profile="/usr/bin/evince" name="/var/cache/openafs/D81/V166635" pid=29610 comm="evince" requested_mask="r" denied_mask="r" fsuid=25574 ouid=0
> [42798.792552] audit: type=1400 audit(1538639477.910:43): apparmor="DENIED" operation="file_perm" profile="/usr/bin/evince" name="/var/cache/openafs/D80/V165031" pid=29610 comm="evince" requested_mask="r" denied_mask="r" fsuid=25574 ouid=0
> [42798.795332] audit: type=1400 audit(1538639477.914:44): apparmor="DENIED" operation="file_perm" profile="/usr/bin/evince" name="/var/cache/openafs/D81/V166635" pid=29610 comm="evince" requested_mask="r" denied_mask="r" fsuid=25574 ouid=0
> [42798.795334] audit: type=1400 audit(1538639477.914:45): apparmor="DENIED" operation="file_perm" profile="/usr/bin/evince" name="/var/cache/openafs/D80/V165031" pid=29610 comm="evince" requested_mask="r" denied_mask="r" fsuid=25574 ouid=0
> [42811.588120] audit: type=1400 audit(1538639490.705:46): apparmor="DENIED" operation="file_perm" profile="/usr/bin/evince" name="/var/cache/openafs/D71/V146768" pid=29664 comm="EvJobScheduler" requested_mask="r" denied_mask="r" fsuid=25574 ouid=0
> 
> 
> Any further suggestions for debugging ?
> 
> thanks & cheers,
> 
>  	martin
> 
> On Thu, 4 Oct 2018, Martin Flemming wrote:
> 
> >
> > Thanks all for input !
> >
> > We will try at first upgrade to
> >
> > https://launchpad.net/~openafs/+archive/ubuntu/stable (1.8.2)
> >
> > and see  ... if there also problems then we'll report it and switch maybe to 
> > an downgrade https://launchpad.net/~openafs/+archive/ubuntu/stable (1.6.23)
> >
> > thanks & cheers
> >
> >       Martin
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info