execve from NetworkManager fails - wrong path in app-armor profile?

Bug #2064007 reported by Christopher J. Ruwe
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
isc-dhcp (Ubuntu)
New
Undecided
Unassigned

Bug Description

Linux <hostname> 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux

```/etc/os-release
PRETTY_NAME="Ubuntu 24.04 LTS"
NAME="Ubuntu"
VERSION_ID="24.04"
VERSION="24.04 LTS (Noble Numbat)"
VERSION_CODENAME=noble
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=noble
LOGO=ubuntu-logo
```

```/etc/apparmor.d/sbin.dhclient
[...]
  # Support the new executable helper from NetworkManager.
  /usr/lib/NetworkManager/nm-dhcp-helper Pxrm,
  signal (receive) peer=/usr/lib/NetworkManager/nm-dhcp-helper,
[...]
```

Starting network manager results in
```
/var/log/syslog:2024-04-28T13:35:22.453634+02:00 <hostname> dhclient[<pid>]: execve (/usr/libexec/nm-dhcp-helper, ...): Permission denied
```

`/usr/lib/NetworkManager/nm-dhcp-helper` does not exist on the system.

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Hello Christopher, thanks for the bug report. Note that due to ISC stepping back from their DHCP packages, we've switched to dhcpcd as the "default" dhcp client. Probably a patch to fix this would be accepted, but it might not be anybody's priority to work on it.

Thanks

Revision history for this message
Christopher J. Ruwe (cruwe) wrote :

Hi Seth,

sorry to reply that late, had been rather occupied @dayjob. Thanks for your explanation. Th system I noticed the problem on is a box which I steadily bump since 20.4, perhaps even since 19.10. I did not notice the change of the default DHCP-client and do not have any particular fondness for the one over the other, so I just changed the DHCP client.

I will not have the time required to implement and accompany a fix for the ISC DHCP-client, regrettably.

In any case, thank you very much for your effort.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.