Your message dated Mon, 03 Apr 2023 11:04:09 +0000
with message-id <[email protected]>
and subject line Bug#1033640: fixed in isc-kea 2.2.0-6
has caused the Debian Bug report #1033640,
regarding kea-lfc missing read access to /etc/resolv.conf
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1033640: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033640
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: kea-common
Version: 2.2.0-5

System:
Debian 12 (Bookworm)
Linux dhcp 6.1.0-6-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.15-1
(2023-03-05) x86_64 GNU/Linux

Error (syslog):
[Wed Mar 29 08:05:59 2023] audit: type=1400 audit(1680069960.544:88):
apparmor="DENIED" operation="open" profile="kea-lfc"
name="/etc/resolv.conf" pid=6641 comm="kea-lfc" requested_mask="r"
denied_mask="r" fsuid=102 ouid=0

The problem can be solved by doing this (but not sure if that's intended):

diff /tmp/usr.sbin.kea-lfc.orig /etc/apparmor.d/usr.sbin.kea-lfc
13a14
>   /etc/resolv.conf r,

And then restarting apparmor solved this.

--- End Message ---
--- Begin Message ---
Source: isc-kea
Source-Version: 2.2.0-6
Done: Paride Legovini <[email protected]>

We believe that the bug you reported is fixed in the latest version of
isc-kea, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Paride Legovini <[email protected]> (supplier of updated isc-kea package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 03 Apr 2023 12:48:28 +0200
Source: isc-kea
Built-For-Profiles: noudeb
Architecture: source
Version: 2.2.0-6
Distribution: unstable
Urgency: medium
Maintainer: Kea <[email protected]>
Changed-By: Paride Legovini <[email protected]>
Closes: 1033639 1033640
Changes:
 isc-kea (2.2.0-6) unstable; urgency=medium
 .
   [ Andreas Hasenack ]
   * apparmor: use the apparmor nameservice abstraction.
     Use the apparmor nameservice abstraction instead of hand-picked rules.
     (Closes: #1033640, #1033639)
Checksums-Sha1:
 696f381b11d3cfe92791fa5d75e6016e4627174d 2507 isc-kea_2.2.0-6.dsc
 1b199dfbd3ff93a19ad4529ce5aad70973bc8479 38904 isc-kea_2.2.0-6.debian.tar.xz
 8b46b71b4373c762c73ae365f8a6909eb2a550c1 10349 isc-kea_2.2.0-6_source.buildinfo
Checksums-Sha256:
 a547379ef0cb318da28afa8bf0f857dcc4d5857a8a1586c85aecb7bddc647d1e 2507 
isc-kea_2.2.0-6.dsc
 36dfc83b66204bfa2f31474d757c602877e7143b7fef51c9c318367494371474 38904 
isc-kea_2.2.0-6.debian.tar.xz
 d9aff9c7dfb94eb643f8487d6ea978d8da9f25e131af06588adb68b92b5fa234 10349 
isc-kea_2.2.0-6_source.buildinfo
Files:
 8696297f66372a75f8c02dbe9abacbe4 2507 net optional isc-kea_2.2.0-6.dsc
 5eac3881d3bb3b67969d7d04cb5e68d8 38904 net optional 
isc-kea_2.2.0-6.debian.tar.xz
 ac10a08542570f425257b4006679a896 10349 net optional 
isc-kea_2.2.0-6_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEVhrVhe7XZpIbqN2W1lhhiD4BTbkFAmQqr0QSHHBhcmlkZUBk
ZWJpYW4ub3JnAAoJENZYYYg+AU25XnkIAKe5x5Ryy3du6qH19XChYMqDMG543al4
dO2dtpVARPls470IrmnmWNco52i5Xgtn+f0bB7KdhRNayuZy99FMxirtAdF7a5j4
L4yzFBmeIdKUT6W/VjNxrZN6xkd2QspMaPAEEsQ/DPdiDOAJFb5ANpBYubkDSPpn
dv5y6xIeeK9HGTer4o6tfI6hizT+AschXL0yF9bMVXDn38uTxQZClAijK6nqKSW4
SeHybOGM9ijZmHCpjG1rC+n7rXFa2ZgtuEIK3TfHFtI0Y6bGnY9DgYSdLRoYsYS8
tRZFufmMHgIGDaioQIVp3skqkyjtq//cAokOrzCNfgZwQbflgM7Xwrk=
=mztI
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to