[ 0.024000] Security Framework initialized [ 0.024000] AppArmor: AppArmor initialized [ 0.038529] evm: security.selinux [ 0.038529] evm: security.SMACK64 [ 0.038529] evm: security.SMACK64EXEC [ 0.038529] evm: security.SMACK64TRANSMUTE [ 0.038529] evm: security.SMACK64MMAP [ 0.038529] evm: security.apparmor [ 0.038529] evm: security.ima [ 0.038529] evm: security.capability [ 0.038572] audit: type=2000 audit(1603125530.036:1): state=initialized audit_enabled=0 res=1 [ 0.072457] AppArmor: AppArmor Filesystem Enabled [ 2.146999] AppArmor: AppArmor sha1 policy hashing enabled [ 2.979645] ata1.00: ACPI cmd f5/00:00:00:00:00:00 (SECURITY FREEZE LOCK) filtered out [ 3.068862] ata2.00: ACPI cmd f5/00:00:00:00:00:00 (SECURITY FREEZE LOCK) filtered out [ 3.072256] ata1.00: ACPI cmd f5/00:00:00:00:00:00 (SECURITY FREEZE LOCK) filtered out [ 3.077654] ata2.00: ACPI cmd f5/00:00:00:00:00:00 (SECURITY FREEZE LOCK) filtered out [ 7.716811] systemd[1]: systemd 237 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid) [ 21.211377] audit: type=1400 audit(1603125551.502:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/lxc-start" pid=1009 comm="apparmor_parser" [ 21.235539] audit: type=1400 audit(1603125551.526:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=1010 comm="apparmor_parser" [ 21.235550] audit: type=1400 audit(1603125551.526:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=1010 comm="apparmor_parser" [ 21.235552] audit: type=1400 audit(1603125551.526:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=1010 comm="apparmor_parser" [ 21.261736] audit: type=1400 audit(1603125551.554:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=1008 comm="apparmor_parser" [ 21.261747] audit: type=1400 audit(1603125551.554:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=1008 comm="apparmor_parser" [ 21.261748] audit: type=1400 audit(1603125551.554:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=1008 comm="apparmor_parser" [ 21.261750] audit: type=1400 audit(1603125551.554:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=1008 comm="apparmor_parser" [ 21.303480] audit: type=1400 audit(1603125551.594:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lxc-container-default" pid=1007 comm="apparmor_parser" [ 21.303491] audit: type=1400 audit(1603125551.594:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lxc-container-default-cgns" pid=1007 comm="apparmor_parser" [ 1841.100332] SGI XFS with ACLs, security attributes, realtime, no debug enabled [ 3357.315473] audit: type=1400 audit(1603128887.584:21): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/ntpd" pid=15203 comm="apparmor_parser" [ 3372.142797] systemd[1]: systemd 245.4-4ubuntu3.2 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid) [ 3432.795544] audit: type=1400 audit(1603128963.067:22): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lsb_release" pid=17156 comm="apparmor_parser" [ 3432.846241] audit: type=1400 audit(1603128963.115:23): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=17162 comm="apparmor_parser" [ 3432.846527] audit: type=1400 audit(1603128963.115:24): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=17162 comm="apparmor_parser" [ 3433.874481] audit: type=1400 audit(1603128964.143:25): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/mysqld" pid=17278 comm="apparmor_parser" [ 3433.898606] audit: type=1400 audit(1603128964.167:26): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/dhcpd" pid=17280 comm="apparmor_parser" [ 3433.910218] audit: type=1400 audit(1603128964.179:27): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/man" pid=17281 comm="apparmor_parser" [ 3433.910457] audit: type=1400 audit(1603128964.179:28): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_filter" pid=17281 comm="apparmor_parser" [ 3433.910718] audit: type=1400 audit(1603128964.179:29): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_groff" pid=17281 comm="apparmor_parser" [ 3433.916314] audit: type=1400 audit(1603128964.187:30): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/named" pid=17279 comm="apparmor_parser" [ 3433.917791] audit: type=1400 audit(1603128964.187:31): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lsb_release" pid=17296 comm="apparmor_parser" [ 3442.451189] audit: type=1400 audit(1603128972.723:69): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=21256 comm="apparmor_parser" [ 3442.471440] audit: type=1400 audit(1603128972.743:70): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=21256 comm="apparmor_parser" [ 3491.374115] audit: type=1400 audit(1603129021.642:71): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/snap/snapd/9607/usr/lib/snapd/snap-confine" pid=21927 comm="apparmor_parser" [ 3491.374353] audit: type=1400 audit(1603129021.642:72): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/snap/snapd/9607/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=21927 comm="apparmor_parser" [ 3494.948155] audit: type=1400 audit(1603129025.218:73): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/snapd/9607/usr/lib/snapd/snap-confine" pid=21989 comm="apparmor_parser" [ 3494.987659] audit: type=1400 audit(1603129025.258:74): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/snapd/9607/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=21989 comm="apparmor_parser" [ 3512.877054] audit: type=1400 audit(1603129043.146:75): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap-update-ns.lxd" pid=22282 comm="apparmor_parser" [ 3512.951632] audit: type=1400 audit(1603129043.218:76): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.benchmark" pid=22284 comm="apparmor_parser" [ 3512.952122] audit: type=1400 audit(1603129043.222:77): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.buginfo" pid=22285 comm="apparmor_parser" [ 3512.952396] audit: type=1400 audit(1603129043.222:78): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.activate" pid=22283 comm="apparmor_parser" [ 3512.958887] audit: type=1400 audit(1603129043.226:79): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.check-kernel" pid=22286 comm="apparmor_parser" [ 3513.033348] audit: type=1400 audit(1603129043.302:80): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.daemon" pid=22287 comm="apparmor_parser" [ 3513.033642] audit: type=1400 audit(1603129043.302:81): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.hook.configure" pid=22288 comm="apparmor_parser" [ 3513.034665] audit: type=1400 audit(1603129043.302:82): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.hook.install" pid=22289 comm="apparmor_parser" [ 3513.036689] audit: type=1400 audit(1603129043.306:83): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.hook.remove" pid=22290 comm="apparmor_parser" [ 3513.120253] audit: type=1400 audit(1603129043.390:84): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.lxd.lxc-to-lxd" pid=22292 comm="apparmor_parser" [ 3530.768817] audit: type=1400 audit(1603129061.038:103): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/lxc-start" pid=23166 comm="apparmor_parser" [ 3530.886407] audit: type=1400 audit(1603129061.154:104): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default" pid=23170 comm="apparmor_parser" [ 3530.886414] audit: type=1400 audit(1603129061.154:105): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-cgns" pid=23170 comm="apparmor_parser" [ 3530.886417] audit: type=1400 audit(1603129061.154:106): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-with-mounting" pid=23170 comm="apparmor_parser" [ 3530.886421] audit: type=1400 audit(1603129061.154:107): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-with-nesting" pid=23170 comm="apparmor_parser" [ 4772.857844] audit: type=1400 audit(1603130303.112:108): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/tcpdump" pid=6050 comm="apparmor_parser" [ 5099.688926] audit: type=1400 audit(1603130629.941:109): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=7763 comm="apparmor_parser" [ 5099.689260] audit: type=1400 audit(1603130629.945:110): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=7763 comm="apparmor_parser" [ 5099.689564] audit: type=1400 audit(1603130629.945:111): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=7763 comm="apparmor_parser" [ 5099.689975] audit: type=1400 audit(1603130629.945:112): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/{,usr/}sbin/dhclient" pid=7763 comm="apparmor_parser" [ 5225.767894] audit: type=1400 audit(1603130756.020:113): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/named" pid=12278 comm="apparmor_parser" [ 5321.327882] audit: type=1400 audit(1603130851.579:114): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/dhcpd" pid=19046 comm="apparmor_parser" [ 5322.177927] audit: type=1400 audit(1603130852.427:115): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/19089/task/19108/comm" pid=19089 comm="dhcpd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 5322.178030] audit: type=1400 audit(1603130852.427:116): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/19089/task/19109/comm" pid=19089 comm="dhcpd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 5322.178069] audit: type=1400 audit(1603130852.427:117): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/19089/task/19110/comm" pid=19089 comm="dhcpd" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 5990.579591] audit: type=1400 audit(1603131520.826:118): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/man" pid=13953 comm="apparmor_parser" [ 5990.579834] audit: type=1400 audit(1603131520.826:119): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_filter" pid=13953 comm="apparmor_parser" [ 5990.580087] audit: type=1400 audit(1603131520.826:120): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_groff" pid=13953 comm="apparmor_parser" [ 6186.114046] audit: type=1400 audit(1603131716.356:121): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/mysqld" pid=18099 comm="apparmor_parser" [ 6187.237742] audit: type=1400 audit(1603131717.480:122): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld" name="/root/.my.cnf" pid=18130 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [ 6187.253423] audit: type=1400 audit(1603131717.496:123): apparmor="DENIED" operation="capable" profile="/usr/sbin/mysqld" pid=18130 comm="mysqld" capability=2 capname="dac_read_search" [ 6369.850889] audit: type=1400 audit(1603131900.095:124): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/mysqld" pid=7513 comm="apparmor_parser" [ 6369.951732] audit: type=1400 audit(1603131900.195:125): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/man" pid=7516 comm="apparmor_parser" [ 6369.951743] audit: type=1400 audit(1603131900.195:126): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_filter" pid=7516 comm="apparmor_parser" [ 6369.951745] audit: type=1400 audit(1603131900.195:127): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_groff" pid=7516 comm="apparmor_parser" [ 6369.972253] audit: type=1400 audit(1603131900.219:128): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/named" pid=7514 comm="apparmor_parser" [ 6369.973229] audit: type=1400 audit(1603131900.219:129): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/dhcpd" pid=7515 comm="apparmor_parser" [ 6370.002937] audit: type=1400 audit(1603131900.247:130): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/tcpdump" pid=7517 comm="apparmor_parser" [ 6370.120781] audit: type=1400 audit(1603131900.367:131): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/lxc-start" pid=7519 comm="apparmor_parser" [ 6370.132716] audit: type=1400 audit(1603131900.379:132): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lsb_release" pid=7521 comm="apparmor_parser" [ 6370.182076] audit: type=1400 audit(1603131900.427:133): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/ntpd" pid=7522 comm="apparmor_parser"