I've just noticed similar messages on a MAAS server:
"kernel: [8227300.867247] audit: type=1400 audit(1653363233.557:970746): apparmor="DENIED" operation="open" profile="snap.maas.supervisor" name="/dev/vda" pid=1645448 comm="amd64" requested_mask="r" denied_mask="r" fsuid=0 ouid=0"
"vda" is the root (and only) disk on this particular machine.
We're also seeing this for "/etc/gss/mech.d/": jsimpso@maas:~$ grep 'apparmor="DENIED"' /var/log/syslog | cut -d ' ' -f 12,13 | sort | uniq profile="snap.maas.supervisor" name="/dev/vda" profile="snap.maas.supervisor" name="/etc/gss/mech.d/"
Here's the output of "snap connections maas" as previously requested: Interface Plug Slot Notes avahi-observe maas:avahi-observe :avahi-observe - content[maas-cli] maas:maas-cli maas-cli:maas-cli - content maas:test-db-socket - - hardware-observe maas:hardware-observe :hardware-observe - home maas:home :home - kernel-module-observe maas:kernel-module-observe :kernel-module-observe - mount-observe maas:mount-observe :mount-observe - network maas:network :network - network-bind maas:network-bind :network-bind - network-control maas:network-control :network-control - network-observe maas:network-observe :network-observe - system-observe maas:system-observe :system-observe - time-control maas:time-control :time-control -
I've just noticed similar messages on a MAAS server:
"kernel: [8227300.867247] audit: type=1400 audit(165336323 3.557:970746) : apparmor="DENIED" operation="open" profile= "snap.maas. supervisor" name="/dev/vda" pid=1645448 comm="amd64" requested_mask="r" denied_mask="r" fsuid=0 ouid=0"
"vda" is the root (and only) disk on this particular machine.
We're also seeing this for "/etc/gss/mech.d/": "snap.maas. supervisor" name="/dev/vda" "snap.maas. supervisor" name="/ etc/gss/ mech.d/ "
jsimpso@maas:~$ grep 'apparmor="DENIED"' /var/log/syslog | cut -d ' ' -f 12,13 | sort | uniq
profile=
profile=
Here's the output of "snap connections maas" as previously requested: observe :hardware-observe - module- observe maas:kernel- module- observe :kernel- module- observe - control :network-control - observe :network-observe -
Interface Plug Slot Notes
avahi-observe maas:avahi-observe :avahi-observe -
content[maas-cli] maas:maas-cli maas-cli:maas-cli -
content maas:test-db-socket - -
hardware-observe maas:hardware-
home maas:home :home -
kernel-
mount-observe maas:mount-observe :mount-observe -
network maas:network :network -
network-bind maas:network-bind :network-bind -
network-control maas:network-
network-observe maas:network-
system-observe maas:system-observe :system-observe -
time-control maas:time-control :time-control -