<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<font face="Droid Serif">Looking for some help with getting slapd to
be able to connect to saslauthd inside an LXD container. Whenever
slapd needs to connect to the socket I see the following error
message in the host's kernel log:<br>
<br>
<font face="Droid Sans Mono"> Jul 6 13:27:17 host kernel:
[923413.078592] audit: type=1400 audit(1594063637.667:51106): <b>apparmor="DENIED"
operation="connect"</b>
namespace="root//lxd-container1_<var-lib-lxd>" <b>profile="/usr/sbin/slapd"
name="/run/saslauthd/mux"</b> pid=58517 comm="slapd" <b>requested_mask="wr"</b>
denied_mask="wr" fsuid=10000111 ouid=10000000</font><br>
<br>
I've added the following to the container config and restarted the
container, but I'm still seeing the same problem:<br>
<br>
<font face="Droid Sans Mono"> lxcuser@host:~$ lxc config get
container1 raw.apparmor <br>
/run/saslauthd/mux wr,<br>
<br>
<font face="Droid Serif">I'm not super familiar with AppArmor
and going through the docs now, but thought I'd ask to see if
anybody can point me in the right direction.<br>
<font face="Droid Sans Mono"><br>
lxcuser@host:~$ lxd --version<br>
3.0.3<br>
lxcuser@host:~$ lsb_release -a<br>
No LSB modules are available.<br>
Distributor ID: Ubuntu<br>
Description: Ubuntu 18.04.4 LTS<br>
Release: 18.04<br>
Codename: bionic<br>
<br>
</font></font></font></font>
<pre class="moz-signature" cols="0">--
Thanks,
Joshua Schaeffer</pre>
</body>
</html>