Public bug reported:
CPC's daily image testing has detected DENIED messages in the AppArmor
logs of Questing machines. The messages first appeared on machines
launched from the 20250808 serial, which was the first serial to carry
version 5.0.0~alpha1-0ubuntu1 of apparmor. The messages are attributable
to the systemd-detect-virt profile, which was added to apparmor in the
aforementioned version.
The following is the complete collection of systemd-detect-virt DENIED
messages from one of the machines:
```
Aug 20 21:38:57 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725937.869:193): apparmor="DENIED" operation="capable" class="cap"
profile="systemd-detect-virt" pid=1003 comm="systemd-detect-" capability=12
capname="net_admin"
Aug 20 21:38:57 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725937.869:194): apparmor="DENIED" operation="sendmsg" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="run/systemd/journal/socket" pid=1003
comm="systemd-detect-" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Aug 20 21:38:57 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725937.869:195): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1003 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:38:57 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725937.889:196): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1003 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:38:57 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725937.889:197): apparmor="DENIED" operation="sendmsg" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="run/systemd/notify" pid=1003
comm="systemd-detect-" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Aug 20 21:38:58 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725938.996:198): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1056 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=105 ouid=0
Aug 20 21:38:58 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725938.996:199): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1056 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=105 ouid=0
Aug 20 21:39:04 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725944.369:202): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1152 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:39:04 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725944.398:203): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1152 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:39:04 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725944.398:204): apparmor="DENIED" operation="capable" class="cap"
profile="systemd-detect-virt" pid=1152 comm="systemd-detect-" capability=12
capname="net_admin"
Aug 20 21:39:04 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725944.398:205): apparmor="DENIED" operation="sendmsg" class="file"
profile="systemd-detect-virt" name="/run/systemd/notify" pid=1152
comm="systemd-detect-" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Aug 20 21:39:05 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725945.100:206): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1200 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:39:05 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725945.100:207): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1200 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:39:05 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725945.100:208): apparmor="DENIED" operation="capable" class="cap"
profile="systemd-detect-virt" pid=1200 comm="systemd-detect-" capability=12
capname="net_admin"
Aug 20 21:39:05 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725945.100:209): apparmor="DENIED" operation="sendmsg" class="file"
profile="systemd-detect-virt" name="/run/systemd/notify" pid=1200
comm="systemd-detect-" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Aug 20 21:39:05 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725945.150:210): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1201 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:39:05 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725945.150:211): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1201 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:39:16 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725956.433:220): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1687 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 20 21:39:16 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755725956.433:221): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=1687 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug 20 21:40:01 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755726001.340:222): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=2135 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:40:01 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755726001.340:223): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=2135 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:40:02 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755726002.082:224): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=2152 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug 20 21:40:02 alan-questing-base-mwnssgzfkn kernel: audit: type=1400
audit(1755726002.082:225): apparmor="DENIED" operation="getattr" class="file"
info="Failed name lookup - disconnected path" error=-13
profile="systemd-detect-virt" name="" pid=2152 comm="systemd-detect-"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
```
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Affects: systemd (Ubuntu)
Importance: Undecided
Status: New
** Also affects: systemd (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2121248
Title:
DENIED messages attributable to systemd-detect-virt profile appearing
in AppArmor logs on Questing machines
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2121248/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
