** Description changed: Similarly to https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage- tools/+bug/2143251, CPC is noticing the following in our Jammy (22.04) pipelines: - ``` ['Jun 13 18:08:49 alan-jammy-okqiqbntsu audit[2982]: AVC apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0', 'Jun 13 18:08:49 alan-jammy-okqiqbntsu kernel: audit: type=1400 audit(1781374129.510:40): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0'] ``` - We are seeing this for the s390x images, built with `ubuntu-advantage- - tools 37.2ubuntu~22.04` + We are seeing this for the ppc64el images
** Description changed: Similarly to https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage- tools/+bug/2143251, CPC is noticing the following in our Jammy (22.04) pipelines: ``` ['Jun 13 18:08:49 alan-jammy-okqiqbntsu audit[2982]: AVC apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0', 'Jun 13 18:08:49 alan-jammy-okqiqbntsu kernel: audit: type=1400 audit(1781374129.510:40): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0'] ``` - We are seeing this for the ppc64el images + We are seeing this for the ppc64el images which are failing our internal + testing and therefore being gated from publication ** Description changed: Similarly to https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage- tools/+bug/2143251, CPC is noticing the following in our Jammy (22.04) pipelines: ``` ['Jun 13 18:08:49 alan-jammy-okqiqbntsu audit[2982]: AVC apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0', 'Jun 13 18:08:49 alan-jammy-okqiqbntsu kernel: audit: type=1400 audit(1781374129.510:40): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0'] ``` We are seeing this for the ppc64el images which are failing our internal - testing and therefore being gated from publication + testing and therefore being gated from publication. The image was built + with the following package: `ubuntu-advantage-tools 37.2ubuntu~22.04` ** Description changed: Similarly to https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage- tools/+bug/2143251, CPC is noticing the following in our Jammy (22.04) pipelines: ``` ['Jun 13 18:08:49 alan-jammy-okqiqbntsu audit[2982]: AVC apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0', 'Jun 13 18:08:49 alan-jammy-okqiqbntsu kernel: audit: type=1400 audit(1781374129.510:40): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache_systemd_detect_virt" name="/sys/firmware/devicetree/base/hypervisor/compatible" pid=2982 comm="systemd-detect-" requested_mask="r" denied_mask="r" fsuid=0 ouid=0'] ``` We are seeing this for the ppc64el images which are failing our internal testing and therefore being gated from publication. The image was built - with the following package: `ubuntu-advantage-tools 37.2ubuntu~22.04` + with the following package: `apparmor 3.0.4-2ubuntu2.5` -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2156929 Title: ubuntu_pro_esm_cache_systemd_detect_virt apparmor DENIED audit messages for comm="systemd-detect-" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2156929/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
