This is due to the slapd apparmor profile and autopkgtest directories:
[Sat Jul 25 19:20:59 2026] audit: type=1400 audit(1785007259.657:6163):
apparmor="DENIED" operation="file_inherit" class="file"
namespace="root//lxd-r-sudo-dep8_<var-snap-lxd-common-lxd>"
profile="/usr/sbin/slapd" name="/tmp/tmp.fTqbLD0ZMz/out" pid=25548 comm="slapd"
requested_mask="a" denied_mask="a" fsuid=1000000 ouid=1000000
There is a rule for /var/tmp, but that is not a symlink to /tmp (anymore?):
/var/tmp/ rw,
/var/tmp/** rw,
Quick fix:
--- a/debian/tests/04-getroot-sssd
+++ b/debian/tests/04-getroot-sssd
@@ -32,6 +32,13 @@ trap '
# openssl req -x509 -days 365 -nodes -newkey rsa:4096 -keyout server_key.pem
-out server_cert.pem --subj "/C=DE/CN=emptysid86.zugschlus.de"
+# LP: #2156801
+if [ -x /usr/sbin/apparmor_parser -a -d /etc/apparmor.d/local ]; then
+ printf "adjust apparmor for slapd in this autopkgtest (LP: #2156801)..."
+ echo " /tmp/** rw," >> /etc/apparmor.d/local/usr.sbin.slapd
+ apparmor_parser -r -W -T /etc/apparmor.d/usr.sbin.slapd || :
+fi
+
printf "make and chown dirs ... "
mkdir -p "${RUNDIR}" "${VARRUNDIR}"
chown openldap "${VARRUNDIR}"
** Changed in: sudo (Ubuntu)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
** Changed in: sudo (Ubuntu)
Status: New => In Progress
** Also affects: sudo (Ubuntu Resolute)
Importance: Undecided
Status: New
** Also affects: sudo (Ubuntu Stonking)
Importance: Undecided
Assignee: Andreas Hasenack (ahasenack)
Status: In Progress
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156801
Title:
sudo: 04-getroot-sssd autopkgtest failing on all arches
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2156801/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
