Ok, I think we got it. In your system, /etc/os-release must be a file,
and not a symlink as it is in our ubuntu systems:

$ ll /etc/os-release 
lrwxrwxrwx 1 root root 21 jan  2 14:25 /etc/os-release -> ../usr/lib/os-release

$ ll /usr/lib/os-release 
-rw-r--r-- 1 root root 393 jan  2 14:25 /usr/lib/os-release

Our profiles have a rule to allow /usr/lib/os-release (via globbing),
but not /etc/os-release specifically.

** Changed in: ubuntu-advantage-tools (Ubuntu)
       Status: New => Confirmed

** Changed in: ubuntu-advantage-tools (Ubuntu)
     Assignee: (unassigned) => Andreas Hasenack (ahasenack)

** Changed in: ubuntu-advantage-tools (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2065573

Title:
  esm-cache.service denied access to /etc/os-release by apparmor

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/2065573/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to