Ok, we found a reproducer: sudo dpkg --add-architecture i386
Then either command will trigger the DENIED: sudo aa-exec -p ubuntu_pro_esm_cache//dpkg dpkg --print-foreign-architecture sudo aa-exec -p ubuntu_pro_esm_cache apt-cache policy Just the presence of /var/lib/dpkg/arch will trigger it, even if it's empty. If the file does not exist, then there is no apparmor DENIED. We will apply your patch. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2067810 Title: New Apparmor denial with ubuntu-advantage-tools on bionic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2067810/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
