But now a day later, launching a new questing container (and it
downloaded a new image, btw), I see the issue, with the same 5.21.4 lxd:
[Tue Sep 16 13:44:06 2025] audit: type=1400 audit(1758030246.890:584):
apparmor="DENIED" operation="sendmsg" class="file"
namespace="root//lxd-q_<var-snap-lxd-common-lxd>" profile="rsyslogd"
name="/run/systemd/journal/dev-log" pid=9412 comm="systemd-journal"
requested_mask="r" denied_mask="r" fsuid=1000000 ouid=1000000
[Tue Sep 16 13:44:07 2025] audit: type=1400 audit(1758030247.977:585):
apparmor="DENIED" operation="sendmsg" class="file"
namespace="root//lxd-q_<var-snap-lxd-common-lxd>" profile="rsyslogd"
name="/run/systemd/journal/dev-log" pid=9412 comm="systemd-journal"
requested_mask="r" denied_mask="r" fsuid=1000000 ouid=1000000
** Changed in: rsyslog (Ubuntu)
Status: Incomplete => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2123821
Title:
bad restriction: apparmor="DENIED" [...] namespace="root//lxd-n_<var-
snap-lxd-common-lxd>" profile="rsyslogd"
name="/run/systemd/journal/dev-log"
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2123821/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
