FIXED
on the backup DHCP server I kept seeing
Apr 10 11:10:08 dhcp-backup kernel: [ 86.045487] audit: type=1400 audit(1586513408.708:44): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/1404/task/1417/comm" pid=1404 comm="dhcpd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 10 11:10:08 dhcp-backup kernel: [ 86.047925] audit: type=1400 audit(1586513408.708:45): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/1404/task/1418/comm" pid=1404 comm="dhcpd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 Apr 10 11:10:08 dhcp-backup kernel: [ 86.048075] audit: type=1400 audit(1586513408.708:46): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/1404/task/1419/comm" pid=1404 comm="dhcpd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Changing /etc/apparmor.d/usr.sbin.dhcpd
# owner @{PROC}/[0-9]*/task/[0-9]*/comm r, owner @{PROC}/[0-9]*/task/[0-9]*/comm rw,
then reloading the policy into the kernel with: sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.dhcpd
resolved the issue
FIXED
on the backup DHCP server I kept seeing
Apr 10 11:10:08 dhcp-backup kernel: [ 86.045487] audit: type=1400 audit(158651340 8.708:44) : apparmor="DENIED" operation="open" profile= "/usr/sbin/ dhcpd" name="/ proc/1404/ task/1417/ comm" pid=1404 comm="dhcpd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 8.708:45) : apparmor="DENIED" operation="open" profile= "/usr/sbin/ dhcpd" name="/ proc/1404/ task/1418/ comm" pid=1404 comm="dhcpd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0 8.708:46) : apparmor="DENIED" operation="open" profile= "/usr/sbin/ dhcpd" name="/ proc/1404/ task/1419/ comm" pid=1404 comm="dhcpd" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Apr 10 11:10:08 dhcp-backup kernel: [ 86.047925] audit: type=1400 audit(158651340
Apr 10 11:10:08 dhcp-backup kernel: [ 86.048075] audit: type=1400 audit(158651340
Changing d/usr.sbin. dhcpd
/etc/apparmor.
# owner @{PROC} /[0-9]* /task/[ 0-9]*/comm r, /[0-9]* /task/[ 0-9]*/comm rw,
owner @{PROC}
then reloading the policy into the kernel with: sudo apparmor_parser -r /etc/apparmor. d/usr.sbin. dhcpd
resolved the issue