Hello @Kent,

thanks for the update, and the reproducer. I marked the bug as confirmed
now.

Could you please try this as a quick workaround:
- add these lines to the existing /etc/apparmor.d/local/usr.sbin.rsyslogd file. 
It is shipped empty, exactly to facilitate such local overrides/inclusions:

 @{run}/log/journal/ r,
 /etc/machine-id r,


Then just restart rsyslog:

 sudo systemctl restart rsyslog


Those are the rules I'll be including in the default apparmor profile, if it 
works for you. With the reproducer you gave me, there were no more DENIED 
apparmor messages in dmesg.


** Changed in: rsyslog (Ubuntu)
       Status: Incomplete => Confirmed

** Also affects: rsyslog (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: rsyslog (Ubuntu Oracular)
   Importance: Undecided
       Status: Confirmed

** Changed in: rsyslog (Ubuntu Noble)
       Status: New => Confirmed

** Tags added: server-todo

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2073628

Title:
  imjournal module works with rsyslog package of ubuntu 22.04 but not
  with ubuntu 24.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/2073628/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to