Public bug reported:
We just caught a regression in our CI: https://github.com/cockpit-
project/bots/pull/6373
An unexpected apparmor denial is logged in the journal:
May 13 08:49:01 ubuntu systemd[1]: Starting Update APT News...
May 13 08:49:01 ubuntu systemd[1]: Starting Update the local ESM caches...
May 13 08:49:02 ubuntu PackageKit[2370]: refresh-cache transaction /17_aebebede
from uid 0 finished with success after 384ms
May 13 08:49:02 ubuntu audit[2667]: AVC apparmor="DENIED" operation="open"
profile="ubuntu_pro_esm_cache" name="/etc/os-release" pid=2667 comm="python3"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
May 13 08:49:02 ubuntu kernel: kauditd_printk_skb: 59 callbacks suppressed
May 13 08:49:02 ubuntu kernel: audit: type=1400 audit(1715590142.157:71):
apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache"
name="/etc/os-release" pid=2667 comm="python3" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0
May 13 08:49:02 ubuntu python3[2667]: ["2024-05-13T08:49:02.172", "ERROR",
"ubuntupro.lib.esm_cache", "main", 17, "Error updating the cache: [Errno 13]
Permission denied: '/etc/os-release'", {}]
May 13 08:49:02 ubuntu systemd[1]: esm-cache.service: Deactivated successfully.
May 13 08:49:02 ubuntu systemd[1]: Finished Update the local ESM caches.
May 13 08:49:02 ubuntu systemd[1]: apt-news.service: Deactivated successfully.
May 13 08:49:02 ubuntu systemd[1]: Finished Update APT News.
The relevant change since the last (working) state is that these packages got
updated:
ubuntu-advantage-tools (31.2.3~22.04 -> 32~22.04)
ubuntu-pro-client (31.2.3~22.04 -> 32~22.04)
ubuntu-pro-client-l10n (31.2.3~22.04 -> 32~22.04)
** Affects: ubuntu-advantage-tools (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2065573
Title:
esm-cache.service denied access to /etc/os-release by apparmor
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2065573/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
