Apparmor denies pid file creation for dhclient when started by network-manager

Bug #1905800 reported by Glenn Washburn
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
isc-dhcp (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

I'm using package isc-dhcp-client version 4.4.1-2.1ubuntu5

I'm getting these messages in syslog:

  dhclient[3308281]: Can't create /run/NetworkManager/dhclient-wlp23s1.pid: Permission denied
  audit: type=1400 audit(1606420037.168:811): apparmor="DENIED" operation="mknod" profile="/{,usr/}sbin/dhclient" name="/run/NetworkManager/dhclient-wlp23s1.pid" pid=3308281 comm="dhclient" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

  dhclient[3308357]: Can't create /run/NetworkManager/dhclient6-wlp23s1.pid: Permission denied
  audit: type=1400 audit(1606420039.268:816): apparmor="DENIED" operation="mknod" profile="/{,usr/}sbin/dhclient" name="/run/NetworkManager/dhclient6-wlp23s1.pid" pid=3308357 comm="dhclient" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

Adding "/run/NetworkManager/dhclient{,6}-*.pid lrw," to the apparmor profile in /etc/apparmor.d/sbin.dhclient fixes the issue.

TJ (tj)
Changed in isc-dhcp (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.