Hello,
I have performed a clean install of suse 10.3 and installed ktorrent 2.2.2-5.1 from packman repositories.
After one week i realized that i got no free space for no particular reason.
I checked and discovered that two text were huge.In more detail the
var/log/messages-20071117 is 7GB
and the
/var/log/messages is 2.8GB

Both files are full(at 99%of their lines) of lines like this:

#
Nov 17 04:48:14 delta9 kernel: audit(1195267693.631:1228833): type=1502 operati
#
on="socket_sendmsg" family="inet" sock_type="stream" protocol=6 pid=3891 profile
#
="/opt/kde3/bin/ktorrent"


Here are the first 200 lines and last 500 lines of the /var/log/messages

http://pastebin.com/m44817eb5
http://pastebin.com/m194a0831

I cant read those lines and i cant explain them,but does all this have to do with ktorrent in any way?

Thnx a lot in advance

You must have an apparmor profile defined for KTorrent that does not allow KTorrent to have network access. Check /etc/apparmor.d for such a profile and remove it.

You are logging every TCP packet which KT is sending, that's gonna fill up diskspace quickly.

jdong wrote:You must have an apparmor profile defined for KTorrent that does not allow KTorrent to have network access. Check /etc/apparmor.d for such a profile and remove it.

Yes i gues a profile for ktorrent exists:

/opt/kde/bin/ktorrent

I will delete it.I remember playing with apparmor first day i made the installation to see how it works.I might have add the ktorrent profile at that day.

Deleted it and see how it goes now.

THnx a lot for your replies

I've got a profile for KTorrent http://jdong.mit.edu/~jdong/apparmor/usr.bin.ktorrent

It's hackish and imposes a download folder limitation, but will definitely prevent a potential KTorrent exploit from doing anything but reading/writing torrent files to a downloads directory.

You can play with it some if you are in the mood . This profile was written with Ubuntu in mind but it shouldn't be hard to adapt it to any distro