Is dhcpd running in a chroot? Is the AppArmor profile using 'attach_disconnected'? (I'm guessing perhaps these aren't being created in the real root; these two combined could give the appearance of creating files in the root.)
Thanks
Is dhcpd running in a chroot? Is the AppArmor profile using 'attach_ disconnected' ? (I'm guessing perhaps these aren't being created in the real root; these two combined could give the appearance of creating files in the root.)
Thanks