Looks like I've found the reason why charon want to open /dev/tty - just to say about buffer overflow error:
01[IKE] CHILD_SA ikev2-with-eap-loadtest{221} established with SPIs c26fb333_i c1ac3989_o and TS 172.31.59.95/32 === 10.0.0.221/32 16[IKE] CHILD_SA ikev2-with-eap-loadtest{222} established with SPIs c0abb568_i c9bb167e_o and TS 172.31.59.95/32 === 10.0.0.222/32 14[NET] received packet: from 172.31.62.150[500] to 172.31.59.95[500] (76 bytes) 02[N*** buffer overflow detected ***: /usr/lib/ipsec/charon terminated ======= Backtrace: ========= /lib/x86_64-linux-gnu/libc.so.6(+0x7338f)[0x7fbfa132538f] /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x5c)[0x7fbfa13bcc9c] /lib/x86_64-linux-gnu/libc.so.6(+0x109b60)[0x7fbfa13bbb60] /lib/x86_64-linux-gnu/libc.so.6(+0x10abe7)[0x7fbfa13bcbe7] /usr/lib/ipsec/libradius.so.0(+0x2fcf)[0x7fbf9c0ecfcf] /usr/lib/ipsec/libradius.so.0(+0x3660)[0x7fbf9c0ed660] /usr/lib/ipsec/plugins/libstrongswan-eap-radius.so(+0x4af1)[0x7fbf9c2f5af1] /usr/lib/ipsec/plugins/libstrongswan-eap-radius.so(+0x4f37)[0x7fbf9c2f5f37] /usr/lib/ipsec/plugins/libstrongswan-eap-radius.so(+0x52af)[0x7fbf9c2f62af] /usr/lib/ipsec/libcharon.so.0(+0x9e3d)[0x7fbfa189ee3d] /usr/lib/ipsec/libcharon.so.0(+0x25419)[0x7fbfa18ba419] /usr/lib/ipsec/libcharon.so.0(+0x302eb)[0x7fbfa18c52eb] /usr/lib/ipsec/libcharon.so.0(+0x25e4f)[0x7fbfa18bae4f] /usr/lib/ipsec/libcharon.so.0(+0x2006f)[0x7fbfa18b506f] /usr/lib/ipsec/libstrongswan.so.0(+0x28df2)[0x7fbfa1d37df2] /usr/lib/ipsec/libstrongswan.so.0(+0x2bc14)[0x7fbfa1d3ac14] /lib/x86_64-linux-gnu/libpthread.so.0(+0x8182)[0x7fbfa167f182] /lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7fbfa13ac47d] ======= Memory map: ======== 7fbf6c000000-7fbf6c0bc000 rw-p 00000000 00:00 0 7fbf6c0bc000-7fbf70000000 ---p 00000000 00:00 0 7fbf74000000-7fbf740d2000 rw-p 00000000 00:00 0 .... -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to strongswan in Ubuntu. https://bugs.launchpad.net/bugs/1549436 Title: AppArmor kills StronSwan daemon 'charon' To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1549436/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs