Verify on jammy: PASS
=====================
#### 2.76.3+ubuntu22.04.1
```
snap version --verbose
snap 2.76.3+ubuntu22.04.1
snapd 2.76.3+ubuntu22.04.1
series 16
ubuntu 22.04
kernel 5.15.0-198-generic
architecture amd64
snapd-bin-from native-package
snap-bin-from native-package
grep -A 3 'interface="org.freedesktop.resolve1.Link"'
/var/lib/snapd/apparmor/profiles/snap.netbird.service-run
interface="org.freedesktop.resolve1.Link"
member="Set{DNS,DNSSEC,DNSSECNegativeTrustAnchors,MulticastDNS,Domains,LLMNR}"
peer=(name="org.freedesktop.resolve1", label=unconfined),
snap run --shell netbird.service-run -c 'dbus-send --system --print-reply
--dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/link/_31
org.freedesktop.resolve1.Link.SetDefaultRoute boolean:false'
Error org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this
sender from sending this message to this recipient; ...
label="snap.netbird.service-run (enforce)" ... member="SetDefaultRoute" ...
snap run --shell netbird.service-run -c 'dbus-send --system --print-reply
--dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/link/_31
org.freedesktop.resolve1.Link.SetDNSOverTLS string:no'
Error org.freedesktop.DBus.Error.AccessDenied: ...
label="snap.netbird.service-run (enforce)" ... member="SetDNSOverTLS" ...
# same AccessDenied for SetDefaultRoute and SetDNSOverTLS on
/org/freedesktop/resolve1/link/_32
# four USER_AVC apparmor="DENIED" operation="dbus_method_call" entries, one per
call
```
Bug reproduced.
#### 2.77.1+ubuntu22.04 from jammy-proposed
After installing the proposed deb and reconnecting netbird:network-
control:
```
snap version --verbose
snap 2.77.1+ubuntu22.04
snapd 2.77.1+ubuntu22.04
series 16
ubuntu 22.04
kernel 5.15.0-198-generic
architecture amd64
snapd-bin-from native-package
snap-bin-from native-package
apt-cache policy snapd
Installed: 2.77.1+ubuntu22.04
Candidate: 2.77.1+ubuntu22.04
*** 2.77.1+ubuntu22.04 500
500 http://archive.ubuntu.com/ubuntu jammy-proposed/main amd64 Packages
grep -A 3 'interface="org.freedesktop.resolve1.Link"'
/var/lib/snapd/apparmor/profiles/snap.netbird.service-run
interface="org.freedesktop.resolve1.Link"
member="Set*"
peer=(name="org.freedesktop.resolve1", label=unconfined),
snap run --shell netbird.service-run -c 'dbus-send --system --print-reply
--dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/link/_31
org.freedesktop.resolve1.Link.SetDefaultRoute boolean:false'
Error org.freedesktop.resolve1.LinkBusy: Link lo is loopback device.
snap run --shell netbird.service-run -c 'dbus-send --system --print-reply
--dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/link/_31
org.freedesktop.resolve1.Link.SetDNSOverTLS string:no'
Error org.freedesktop.resolve1.LinkBusy: Link lo is loopback device.
snap run --shell netbird.service-run -c 'dbus-send --system --print-reply
--dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/link/_32
org.freedesktop.resolve1.Link.SetDefaultRoute boolean:false'
Error org.freedesktop.resolve1.LinkBusy: Link ens3 is managed.
snap run --shell netbird.service-run -c 'dbus-send --system --print-reply
--dest=org.freedesktop.resolve1 /org/freedesktop/resolve1/link/_32
org.freedesktop.resolve1.Link.SetDNSOverTLS string:no'
Error org.freedesktop.resolve1.LinkBusy: Link ens3 is managed.
```
No further apparmor="DENIED" dbus_method_call entries for
SetDefaultRoute or SetDNSOverTLS. systemd-resolved stayed active,
resolvectl query and ping of archive.ubuntu.com succeeded, and the
default route was unchanged.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2143934
Title:
network-control interface: incomplete D-Bus rules for resolve1.Link
object (missing SetDefaultRoute, SetDNSOverTLS, SetDNSEx)
To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/2143934/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
