** Tags removed: verification-needed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400 audit(1460259033.648:34): apparmor="DENIED"
operation="sendmsg"
** Changed in: isc-dhcp (Ubuntu Wily)
Status: Invalid => Won't Fix
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400 audit(1460259033.648:34):
This bug was fixed in the package isc-dhcp - 4.2.4-7ubuntu12.5
---
isc-dhcp (4.2.4-7ubuntu12.5) trusty; urgency=medium
* debian/apparmor-profile.dhclient: Add the attach_disconnected flag to
prevent
disconnected path denials (LP: #1568485).
-- Jorge Niedbalski
** Changed in: isc-dhcp (Ubuntu Wily)
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400 audit(1460259033.648:34):
bug 1574226 appears to be a run-of-the-mill "something broke" report.
The error message in the logs is:
invoke-rc.d: initscript isc-dhcp-server, action "start" failed.
The package in this SRU has the following change:
-/sbin/dhclient {
+/sbin/dhclient flags=(attach_disconnected) {
** Tags removed: verification-failed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400 audit(1460259033.648:34): apparmor="DENIED"
operation="sendmsg"
** Changed in: isc-dhcp (Ubuntu Wily)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400 audit(1460259033.648:34):
Hello dino99, or anyone else affected,
Accepted isc-dhcp into trusty-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/isc-
dhcp/4.2.4-7ubuntu12.5 in a few hours, and then in the -proposed
repository.
Please help us by testing this new package. See
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: isc-dhcp (Ubuntu Wily)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
** Changed in: isc-dhcp (Ubuntu Trusty)
Status: New => In Progress
** Changed in: isc-dhcp (Ubuntu Trusty)
Importance: Undecided => Medium
** Changed in: isc-dhcp (Ubuntu Trusty)
Assignee: (unassigned) => Jorge Niedbalski (niedbalski)
** Patch added: "Trusty Patch"
** Also affects: isc-dhcp (Ubuntu Trusty)
Importance: Undecided
Status: New
** Also affects: isc-dhcp (Ubuntu Wily)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
This bug was fixed in the package isc-dhcp - 4.3.3-5ubuntu12
---
isc-dhcp (4.3.3-5ubuntu12) xenial; urgency=medium
* debian/apparmor/sbin.dhclient: Add the attach_disconnected flag to prevent
disconnected path denials as seen with the new 1.1.93 based
network-manager (LP:
** Changed in: isc-dhcp (Ubuntu)
Status: In Progress => Confirmed
** Changed in: isc-dhcp (Ubuntu)
Status: Confirmed => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
@dino99 the apparmor 2.10.95-0ubuntu2 upload was not intended to fix
this bug. The dhclient profile is in the iscp-dhcp package and it will
need to be updated.
** Package changed: apparmor (Ubuntu) => isc-dhcp (Ubuntu)
** Changed in: isc-dhcp (Ubuntu)
Importance: Undecided => High
** Changed
Feedback #13
Sadly the error is still logged:
kernel: audit: type=1400 audit(1460540782.347:30): apparmor="DENIED"
operation="sendmsg" info="Failed name lookup - disconnected path" error=-13 p
.
/etc/apparmor.d/sbin.dhclient still has "/sbin/dhclient { " ; it should
now use "
apparmor 2.10.95-0ubuntu2 might fix this issue (Bug #1569316)
** Changed in: apparmor (Ubuntu)
Status: Confirmed => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
However, I still get an IP from dhcp, based on the logs, it seems
dhclient retries this operation many times and it eventually succeeds.
Maybe a race condition?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Hitting this as well as of the recent upgrade to network manager
(1.1.93) came along with #1569316
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400
@dino99 The apparmor="STATUS" messages are harmless. They're simply
alerting you that an AppArmor profile has been loaded into the kernel.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
@Tyler
this has happened on a single home desktop, which is a wily to xenial upgrade.
After following #4 howto (resumed in #5) the error is gone.
This is indeed only something i've discovered when browsing the journalctl.
There was no sad effect detected previously finding that logged.
@dino99 - can you give any more details about how you're hitting this
bug in Xenial? I've enabled -proposed and do not experience this denial.
Note that Paolo de Rosa is hitting it while provisioning a machine with
MAAS.
--
You received this bug notification because you are a member of Ubuntu
I'm hitting the same bug, during the commissioning using trusty image in
maas with wily kernel, due to intel NICs (supported only with kernel
4.2)
We hit the bug running dhclient:
root@messy-body:~# dhclient -nw eth2
dhclient: error while loading shared libraries: libc.so.6: cannot stat shared
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: apparmor (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
Thanks John
have made the change:
#/sbin/dhclient {
/sbin/dhclient flags=(attach_disconnected) {
and rebooted: the error is gone now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
It needs to be set in the profile file
/etc/apparmor.d/sbin.dhclient
apply the following change
--- a/sbin.dhclient 2016-02-25 06:32:17.0 -0800
+++ b/sbin.dhclient 2016-04-10 12:41:41.826906424 -0700
@@ -3,7 +3,7 @@
# Author: Jamie Strandboge
#include
Thanks Christian,
but i wonder where to set that setting. Is it into:
/sys/kernel/security/apparmor/profiles
or somewhere else ?
In fact it seems that there is no kernel's 'profile' set at all
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
To get things working, add
flags=(attach_disconnected)
to the profile and reload it.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568485
Title:
kernel: audit: type=1400
27 matches
Mail list logo