• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Question kenrnel audit messages in syslog

msauer

New Pleskian
Server operating system version
Ubuntu 22.04 LTS
Plesk version and microupdate number
18.0.61 #4
Hi,

on my Strato Ubuntu vServer with Plesk Obsidian, I will get every 10second the following message in the syslog

Code:
May 31 07:42:17 xxx kernel: [2941918.693355] audit: type=1400 audit(1717141337.833:242947): apparmor="ALLOWED" operation="sendmsg" profile="php-fpm" name="/run/systemd/notify" pid=781199 comm="php-fpm8.1" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
M

What das this message say and how can I stop this?
Thank you for your help.
BR
martin
 
Probably the php-fpm profile is present in the Apparmor complaint mode, which is why it shows up in your syslog. If you want to be sure, you can check if it's listed in complain mode with the aa-status command.

The like @AYamshanov posted provides detailed information on how to adjust profiles.
 
Back
Top