dmesg has a lot of apparmor denials when machines with AMT power type are used

Bug #1917480 reported by Vladimir Grevtsev
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
MAAS
Status tracked in 3.6
3.5
Won't Fix
Low
Unassigned
3.6
Triaged
Low
Unassigned

Bug Description

[ 381.604439] audit: type=1400 audit(1614697733.546:299): apparmor="DENIED" operation="open" profile="snap.maas.supervisor" name="/etc/openwsman/openwsman_client.conf" pid=3815 comm="wsman" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[ 381.678728] audit: type=1400 audit(1614697733.622:300): apparmor="DENIED" operation="open" profile="snap.maas.supervisor" name="/etc/openwsman/openwsman_client.conf" pid=3820 comm="wsman" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[ 381.689950] audit: type=1400 audit(1614697733.634:301): apparmor="DENIED" operation="open" profile="snap.maas.supervisor" name="/etc/openwsman/openwsman_client.conf" pid=3820 comm="wsman" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Also, I've spotted one more (not AMT-related this time):

[ 381.732730] audit: type=1400 audit(1614697733.674:302): apparmor="DENIED" operation="open" profile="snap.maas.supervisor" name="/etc/ssh/ssh_config" pid=3823 comm="ssh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Revision history for this message
Bill Wear (billwear) wrote :

I can easily get these messages for most machine actions in MAAS. They do not seem to affect the operation of MAAS for me. Triaging, but with very low priority.

Changed in maas:
status: New → Triaged
importance: Undecided → Low
summary: - [2.9] dmesg has a lot of apparmor denials when machines with AMT power
- type are used
+ dmesg has a lot of apparmor denials when machines with AMT power type
+ are used
Revision history for this message
Jerzy Husakowski (jhusakowski) wrote :

MAAS power driver should not try to access the contents of the file mentioned in the logs as it is provided with connection parameters explicitly.

Changed in maas:
milestone: none → 3.5.0
Changed in maas:
milestone: 3.5.0 → 3.5.x
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.