@John, thank youf or the patch, but maybe I misunderstood it. Applying that patch to Linus’ master branch, should fix the regression, right? No user space change needed, correct?
``` $ git log --oneline -2 4a4a4a7 apparmor: fix regression in network mediation when using feature pinning 6cff0a1 Merge tag 'platform-drivers-x86-v4.14-3' of git://git.infradead.org/linux-platform-drivers-x86 ``` With a Linux kernel built from that, NetworkManager still does not work, and even brightness controls don’t work on a Dell XPS 13 9360. ``` $ journalctl -k […] Okt 24 16:54:05 Ixpees kernel: ath10k_pci 0000:3a:00.0: board_file api 2 bmi_id N/A crc32 07ee144e Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.907:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session" pid=828 comm="apparmor_parse Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.907:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/lightdm/lightdm-guest-session//chromium" pid=828 comm="appa Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=830 comm="apparmor_parser" Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=830 comm="apparmo Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=830 comm="apparmor_parse Okt 24 16:54:05 Ixpees kernel: audit: type=1400 audit(1508856845.991:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=830 comm="apparmor_par Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.055:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="webbrowser-app" pid=833 comm="apparmor_parser" Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.055:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="webbrowser-app//oxide_helper" pid=833 comm="apparmor_parser" Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.115:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=856 comm="apparmor_parser" Okt 24 16:54:06 Ixpees kernel: audit: type=1400 audit(1508856846.155:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=852 comm="apparmor_parser" Okt 24 16:54:06 Ixpees kernel: ath10k_pci 0000:3a:00.0: Unknown eventid: 90118 Okt 24 16:54:06 Ixpees kernel: ath10k_pci 0000:3a:00.0: htt-ver 3.32 wmi-op 4 htt-op 3 cal otp max-sta 32 raw 0 hwcrypto 1 […] Okt 24 16:54:06 Ixpees kernel: ath: EEPROM regdomain: 0x6c Okt 24 16:54:06 Ixpees kernel: ath: EEPROM indicates we should expect a direct regpair map Okt 24 16:54:06 Ixpees kernel: ath: Country alpha2 being used: 00 Okt 24 16:54:06 Ixpees kernel: ath: Regpair used: 0x6c Okt 24 16:54:06 Ixpees kernel: ath10k_pci 0000:3a:00.0 wlp58s0: renamed from wlan0 Okt 24 16:54:07 Ixpees kernel: Bluetooth: BNEP (Ethernet Emulation) ver 1.3 Okt 24 16:54:07 Ixpees kernel: Bluetooth: BNEP filters: protocol multicast Okt 24 16:54:07 Ixpees kernel: Bluetooth: BNEP socket layer initialized Okt 24 16:54:08 Ixpees kernel: IPv6: ADDRCONF(NETDEV_UP): wlp58s0: link is not ready Okt 24 16:54:08 Ixpees kernel: ath10k_pci 0000:3a:00.0: Unknown eventid: 90118 Okt 24 16:54:08 Ixpees kernel: IPv6: ADDRCONF(NETDEV_UP): wlp58s0: link is not ready Okt 24 16:54:08 Ixpees kernel: IPv6: ADDRCONF(NETDEV_UP): wlp58s0: link is not ready Okt 24 16:54:09 Ixpees kernel: Bluetooth: RFCOMM TTY layer initialized Okt 24 16:54:09 Ixpees kernel: Bluetooth: RFCOMM socket layer initialized Okt 24 16:54:09 Ixpees kernel: Bluetooth: RFCOMM ver 1.11 Okt 24 16:54:10 Ixpees kernel: kauditd_printk_skb: 35 callbacks suppressed Okt 24 16:54:10 Ixpees kernel: audit: type=1400 audit(1508856850.963:47): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:11 Ixpees kernel: audit: type=1400 audit(1508856851.963:48): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:12 Ixpees kernel: audit: type=1400 audit(1508856852.963:49): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:13 Ixpees kernel: audit: type=1400 audit(1508856853.963:50): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:14 Ixpees kernel: audit: type=1400 audit(1508856854.963:51): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:15 Ixpees kernel: audit: type=1400 audit(1508856855.963:52): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:16 Ixpees kernel: audit: type=1400 audit(1508856856.963:53): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:17 Ixpees kernel: audit: type=1400 audit(1508856857.963:54): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:18 Ixpees kernel: audit: type=1400 audit(1508856858.963:55): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:19 Ixpees kernel: audit: type=1400 audit(1508856859.963:56): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:20 Ixpees kernel: audit: type=1400 audit(1508856860.963:57): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:21 Ixpees kernel: audit: type=1400 audit(1508856861.963:58): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:22 Ixpees kernel: audit: type=1400 audit(1508856862.963:59): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:23 Ixpees kernel: audit: type=1400 audit(1508856863.963:60): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:24 Ixpees kernel: audit: type=1400 audit(1508856864.963:61): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:25 Ixpees kernel: audit: type=1400 audit(1508856865.963:62): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:26 Ixpees kernel: audit: type=1400 audit(1508856866.967:63): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:27 Ixpees kernel: audit: type=1400 audit(1508856867.967:64): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:28 Ixpees kernel: audit: type=1400 audit(1508856868.967:65): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:29 Ixpees kernel: audit: type=1400 audit(1508856869.967:66): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" proto Okt 24 16:54:30 Ixpees kernel: audit: type=1400 audit(1508856870.967:67): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=1111 comm="cups-browsed" family="unix" sock_type="stream" pro […] Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.387:105): apparmor="DENIED" operation="create" profile="/sbin/dhclient" pid=1930 comm="dhclient" family="unix" sock_type="dgram" protocol=0 reques Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.391:106): apparmor="DENIED" operation="create" profile="/sbin/dhclient" pid=1930 comm="dhclient" family="unix" sock_type="stream" protocol=0 reque Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.391:107): apparmor="DENIED" operation="create" profile="/sbin/dhclient" pid=1930 comm="dhclient" family="unix" sock_type="stream" protocol=0 reque Okt 24 16:55:08 Ixpees kernel: audit: type=1400 audit(1508856908.399:108): apparmor="DENIED" operation="create" profile="/usr/lib/NetworkManager/nm-dhcp-helper" pid=1931 comm="nm-dhcp-helper" family="unix" sock_ […] ``` -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1721278 Title: apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" w/ 4.14-rc2 and later Status in apparmor package in Ubuntu: Confirmed Status in apparmor source package in Xenial: Confirmed Status in apparmor source package in Zesty: Confirmed Status in apparmor source package in Artful: Confirmed Bug description: With Ubuntu 16.04.3 LTS (Xenial Xerus), and apparmor 2.10.95-0ubuntu2.7, in the system log each second the error message below is printed to. ``` […] [Mi Okt 4 16:57:52 2017] audit: type=1400 audit(1507129072.882:554): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=939 comm="cups-browsed" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" [Mi Okt 4 16:57:53 2017] audit: type=1400 audit(1507129073.886:555): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=939 comm="cups-browsed" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" [Mi Okt 4 16:57:54 2017] audit: type=1400 audit(1507129074.886:556): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=939 comm="cups-browsed" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" [Mi Okt 4 16:57:55 2017] audit: type=1400 audit(1507129075.886:557): apparmor="DENIED" operation="create" profile="/usr/sbin/cups-browsed" pid=939 comm="cups-browsed" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" […] ``` To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1721278/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
