Comment 9 for bug 1184914

Could this be bug 1186662? The main packaging branch has a workaround for that which is worth a try.

It's a matter of adding this line to /etc/apparmor.d/dhcpd.d/maas:

    capability dac_override,

...and then reloading the apparmor config.