Thanks Jean-Daniel for the report.

Charon systemd is in complain mode as we know it isn't complete yet (otherwise 
it would break).
Thank you for the report.

Some other services have that rule as well, I wonder if that should be in an 
abstraction.
E.g. rsyslog:
  /{,var/}run/systemd/notify    w,

The rule above fixes it - verified in Bionic.

I'll likely add a change like that on the next merge.
But also I will let Debian know about it to fix it there as well.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1765652

Title:
  app armor profile for systemd daemon missing entry for
  /run/systemd/notify

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1765652/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to