apparmor blocks kea-ctrl-agent from listening on IPv6

[Andreas Hasenack]

Reported in debian[1], and confirmed in debian and ubuntu:

Sep 26 18:34:49 m-kea kea-ctrl-agent[2930]: 2023-09-26 18:34:49.166 FATAL [kea-ctrl-agent.dctl/2930.140374153430912] DCTL_CONFIG_FILE_LOAD_FAIL Control-agent reason: unable to setup TCP acceptor for listening to the incoming HTTP requests: open: Permission denied

apparmor:
[ter set 26 15:34:47 2023] audit: type=1400 audit(1695753288.404:664): apparmor="DENIED" operation="create" class="net" namespace="root//lxd-m-kea_<var-snap-lxd-common-lxd>" profile="kea-ctrl-agent" pid=27482 comm="kea-ctrl-agent" family="inet6" sock_type="stream" protocol=6 requested_mask="create" denied_mask="create"

1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052764

[Andreas Hasenack (ahasenack)]

Sent to debian via https://salsa.debian.org/debian/isc-kea/-/merge_requests/35

[Paride Legovini (paride)]

MR approved, merged and uploaded:

isc-kea_2.2.1-3_source.changes ACCEPTED into unstable

Thanks!

[Andreas Hasenack (ahasenack)]

This bug was fixed in the package isc-kea - 2.2.1-3

---------------
isc-kea (2.2.1-3) unstable; urgency=medium

  [ Andreas Hasenack ]
  * apparmor: allow kea-ctrl-agent to access IPv6 sockets
    (Closes: #1052764)

 -- Paride Legovini <email address hidden> Wed, 27 Sep 2023 14:47:14 +0200

isc-kea (2.2.1-2) unstable; urgency=medium

  * d/po/de.po: add German debconf translation.
    Thanks to Christoph Brinkhaus (Closes: #1041710)
  * d/po/es.po: add Spanish debconf translation.
    Thanks to Camaleón (Closes: #1041772)
  * d/po/nl.po: add Dutch debconf translation.
    Thanks to Frans Spiesschaert (Closes: #1041875)

 -- Athos Ribeiro <email address hidden> Sun, 10 Sep 2023 10:09:52 -0300

[Andreas Hasenack (ahasenack)]

Synced into mantic, it's in unapproved currently.

[Andreas Hasenack (ahasenack)]

And now it's accepted.

[Andreas Hasenack (ahasenack)]

2.2.1-3 migrated, closing bug.