I presume you mean the messages: [ 36.611637] audit: type=1400 audit(1749048226.497:685): apparmor="DENIED" operation="capable" class="cap" profile="/snap/snapd/24505/usr/lib/snapd/snap-confine" pid=7541 comm="snap-confine" capability=12 capname="net_admin" [ 36.612432] audit: type=1400 audit(1749048226.497:686): apparmor="DENIED" operation="capable" class="cap" profile="/snap/snapd/24505/usr/lib/snapd/snap-confine" pid=7541 comm="snap-confine" capability=38 capname="perfmon"
Sadly not until apparmor 6.x; At present there is no "quiet" without "deny" functionality exposed in the apparmor userspace parser. The capability checks are triggered by the kernel but I'm not entirely sure on which type of access (they are emitted asynchronously). I'll see if I can pinpoint the exact trigger of each denial. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2112478 Title: apparmor="DENIED" audit messages To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2112478/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
