Public bug reported:

Ubuntu 20.04.3
Kernel: 5.4.0-1028-bluefield

ii  isc-dhcp-client                                4.4.1-2.1ubuntu5.20.04.2     
                                        arm64        DHCP client for 
automatically obtaining an IP address
ii  isc-dhcp-common                                4.4.1-2.1ubuntu5.20.04.2     
                                        arm64        common manpages relevant 
to all of the isc-dhcp packages


ii  apparmor                                       2.13.3-7ubuntu5.1            
                                        arm64        user-space parser utility 
for AppArmor
ii  libapparmor1:arm64                             2.13.3-7ubuntu5.1            
                                        arm64        changehat AppArmor library

ii  network-manager                                1.22.10-1ubuntu2.3
arm64        network management framework (daemon and userspace tools)


Configuration:
--------------
# cat /etc/netplan/50-cloud-init.yaml
# This file is generated from information provided by the datasource.  Changes
# to it will not persist across an instance reboot.  To disable cloud-init's
# network configuration capabilities, write a file
# /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:
# network: {config: disabled}
network:
    ethernets:
        oob_net0:
            dhcp4: true
        tmfifo_net0:
            addresses:
            - 192.168.100.2/30
            dhcp4: false
            nameservers:
                addresses:
                - 192.168.100.1
            routes:
            -   metric: 1025
                to: 0.0.0.0/0
                via: 192.168.100.1
    renderer: NetworkManager
    version: 2


Dmesg:
-----
[59685.099760] audit: type=1400 audit(1645193286.508:2011): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/103303/task/103306/comm" pid=103303 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[59685.148687] audit: type=1400 audit(1645193286.560:2012): apparmor="DENIED" 
operation="mknod" profile="/{,usr/}sbin/dhclient" 
name="/run/NetworkManager/dhclient-oob_net0.pid" pid=103303 comm="dhclient" 
requested_mask="c" denied_mask="c" fsuid=0 ouid=0
[59926.641500] audit: type=1400 audit(1645193528.052:2013): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104083/task/104084/comm" pid=104083 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[59926.641685] audit: type=1400 audit(1645193528.052:2014): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104083/task/104085/comm" pid=104083 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[59926.641776] audit: type=1400 audit(1645193528.052:2015): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104083/task/104086/comm" pid=104083 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[59931.623506] audit: type=1400 audit(1645193533.032:2016): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104158/task/104159/comm" pid=104158 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[59931.623665] audit: type=1400 audit(1645193533.032:2017): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104158/task/104160/comm" pid=104158 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[59931.623758] audit: type=1400 audit(1645193533.032:2018): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104158/task/104161/comm" pid=104158 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[60030.017642] audit: type=1400 audit(1645193631.428:2019): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104353/task/104354/comm" pid=104353 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[60030.017810] audit: type=1400 audit(1645193631.428:2020): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104353/task/104355/comm" pid=104353 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[60030.017907] audit: type=1400 audit(1645193631.428:2021): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104353/task/104356/comm" pid=104353 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
[60030.073115] audit: type=1400 audit(1645193631.484:2022): apparmor="DENIED" 
operation="mknod" profile="/{,usr/}sbin/dhclient" 
name="/run/NetworkManager/dhclient-oob_net0.pid" pid=104353 comm="dhclient" 
requested_mask="c" denied_mask="c" fsuid=0 ouid=0

** Affects: isc-dhcp (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to isc-dhcp in Ubuntu.
https://bugs.launchpad.net/bugs/1961413

Title:
  [BLUEFIELD] dmesg is flooded with apparmor="DENIED"  for dhclient
  messages

Status in isc-dhcp package in Ubuntu:
  New

Bug description:
  Ubuntu 20.04.3
  Kernel: 5.4.0-1028-bluefield

  ii  isc-dhcp-client                                4.4.1-2.1ubuntu5.20.04.2   
                                          arm64        DHCP client for 
automatically obtaining an IP address
  ii  isc-dhcp-common                                4.4.1-2.1ubuntu5.20.04.2   
                                          arm64        common manpages relevant 
to all of the isc-dhcp packages

  
  ii  apparmor                                       2.13.3-7ubuntu5.1          
                                          arm64        user-space parser 
utility for AppArmor
  ii  libapparmor1:arm64                             2.13.3-7ubuntu5.1          
                                          arm64        changehat AppArmor 
library

  ii  network-manager                                1.22.10-1ubuntu2.3
  arm64        network management framework (daemon and userspace tools)

  
  Configuration:
  --------------
  # cat /etc/netplan/50-cloud-init.yaml
  # This file is generated from information provided by the datasource.  Changes
  # to it will not persist across an instance reboot.  To disable cloud-init's
  # network configuration capabilities, write a file
  # /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg with the following:
  # network: {config: disabled}
  network:
      ethernets:
          oob_net0:
              dhcp4: true
          tmfifo_net0:
              addresses:
              - 192.168.100.2/30
              dhcp4: false
              nameservers:
                  addresses:
                  - 192.168.100.1
              routes:
              -   metric: 1025
                  to: 0.0.0.0/0
                  via: 192.168.100.1
      renderer: NetworkManager
      version: 2

  
  Dmesg:
  -----
  [59685.099760] audit: type=1400 audit(1645193286.508:2011): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/103303/task/103306/comm" pid=103303 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [59685.148687] audit: type=1400 audit(1645193286.560:2012): apparmor="DENIED" 
operation="mknod" profile="/{,usr/}sbin/dhclient" 
name="/run/NetworkManager/dhclient-oob_net0.pid" pid=103303 comm="dhclient" 
requested_mask="c" denied_mask="c" fsuid=0 ouid=0
  [59926.641500] audit: type=1400 audit(1645193528.052:2013): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104083/task/104084/comm" pid=104083 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [59926.641685] audit: type=1400 audit(1645193528.052:2014): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104083/task/104085/comm" pid=104083 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [59926.641776] audit: type=1400 audit(1645193528.052:2015): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104083/task/104086/comm" pid=104083 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [59931.623506] audit: type=1400 audit(1645193533.032:2016): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104158/task/104159/comm" pid=104158 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [59931.623665] audit: type=1400 audit(1645193533.032:2017): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104158/task/104160/comm" pid=104158 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [59931.623758] audit: type=1400 audit(1645193533.032:2018): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104158/task/104161/comm" pid=104158 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [60030.017642] audit: type=1400 audit(1645193631.428:2019): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104353/task/104354/comm" pid=104353 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [60030.017810] audit: type=1400 audit(1645193631.428:2020): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104353/task/104355/comm" pid=104353 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [60030.017907] audit: type=1400 audit(1645193631.428:2021): apparmor="DENIED" 
operation="open" profile="/{,usr/}sbin/dhclient" 
name="/proc/104353/task/104356/comm" pid=104353 comm="dhclient" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  [60030.073115] audit: type=1400 audit(1645193631.484:2022): apparmor="DENIED" 
operation="mknod" profile="/{,usr/}sbin/dhclient" 
name="/run/NetworkManager/dhclient-oob_net0.pid" pid=104353 comm="dhclient" 
requested_mask="c" denied_mask="c" fsuid=0 ouid=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/1961413/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to