errors logged with new install

[ben thielsen]

immediately following a new install with a minimal configuration, i've found that two messages are logged regarding dhcpd:

Aug 27 12:46:34 server dhcpd: Can't create PID file /run/dhcp-server/dhcpd.pid: Permission denied.

Aug 27 12:46:37 honeycomb kernel: audit: type=1400 audit(1440693994.041:11): apparmor="DENIED" operation="capable" profile="/usr/sbin/dhcpd" pid=10990 comm="dhcpd" capability=1 capname="dac_override"

while dhcpd does continue starting, and appears [given rudimentary testing] to operate properly, a fresh/new install of the software should not produce messages like this.

here is the config being used:
log-facility local7;
ddns-update-style none;
default-lease-time 43200;
max-lease-time 86400;
authoritative;
subnet 172.31.0.0 netmask 255.255.255.240 {
 range 172.31.0.7 172.31.0.14;
}

1] >lsb_release -rd
Description: Ubuntu 15.04
Release: 15.04

2] >apt-cache policy isc-dhcp-server
isc-dhcp-server:
  Installed: 4.3.1-5ubuntu2.2
  Candidate: 4.3.1-5ubuntu2.2
  Version table:
 *** 4.3.1-5ubuntu2.2 0
        500 http://us.archive.ubuntu.com/ubuntu/ vivid-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     4.3.1-5ubuntu2 0
        500 http://us.archive.ubuntu.com/ubuntu/ vivid/main amd64 Packages

3] i expected a new install with a basic config to not produce message like the above
4] messages were produced

[Seth Arnold (seth-arnold)]

It's complicated by the desire to avoid needing the CAP_DAC_OVERRIDE capability in dhcpd. Some more information (but for a different file) is at https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/1186662

Thanks

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.