#1066094 squidguard: Squidguard does not work with default squid apparmor profile

Package:
squidguard
Source:
squidguard
Description:
filter and redirector plugin for Squid
Submitter:
Marco Gaiarin
Date:
2024-03-13 12:27:02 UTC
Severity:
normal
#1066094#5
Date:
2024-03-12 13:17:36 UTC
From:
To:
Dear Maintainer,

i've tried to use as 'usual' squidguard in my squid configuration, but squid simply
start filling logs (syslog and squid's cache.log) with:

	2024/03/01 14:22:59 kid1| Starting new helpers
	2024/03/01 14:22:59 kid1| helperOpenServers: Starting 1/10 'squidGuard' processes
	2024/03/01 14:22:59 kid2| ipcCreate: /usr/bin/squidGuard: (13) Permission denied
	2024/03/01 14:22:59 kid2| WARNING: redirector #Hlpr175 exited

after fiddling a bit, i've found that the guilty is apparmor squid profile (so,
i've not clear if this is a squidguard or a squid bug, indeed ;-).


I've simply done:

	aa-disable /etc/apparmor.d/usr.sbin.squid

and now squid (and squidguard) run as expected.


I've also looked around and seems that there's an ubuntu bug opened:

https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1787409


Thanks.

#1066094#10
Date:
2024-03-12 21:31:11 UTC
From:
To:
Hello Marco,

I think we need an apparmor config file for squidguard. I never have
written such a config, but perhaps you have an example of such a config
file? Otherwise I need some time for testing to resolve this problem.

Have a nice day.

Joachim (Germany)

#1066094#15
Date:
2024-03-13 12:12:52 UTC
From:
To:
I suppose the same. Surely better then adding squidguard data to the squid
apparmor profiles, as suggested by ubuntu bug.
profile i've simply followed the debian wiki:

https://wiki.debian.org/AppArmor/HowToUse

If you provide some test apparmor profile i can try it and provide feedback.

Thanks to you!