[ 0.024000] Security Framework initialized [ 0.024000] AppArmor: AppArmor initialized [ 0.077003] evm: security.selinux [ 0.077004] evm: security.SMACK64 [ 0.077005] evm: security.SMACK64EXEC [ 0.077006] evm: security.SMACK64TRANSMUTE [ 0.077007] evm: security.SMACK64MMAP [ 0.077007] evm: security.apparmor [ 0.077008] evm: security.ima [ 0.077009] evm: security.capability [ 0.077032] audit: type=2000 audit(1606970041.076:1): state=initialized audit_enabled=0 res=1 [ 0.315224] AppArmor: AppArmor Filesystem Enabled [ 1.419517] AppArmor: AppArmor sha1 policy hashing enabled [ 6.471618] systemd[1]: systemd 237 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid) [ 30.077240] audit: type=1400 audit(1606970072.151:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-senddoc" pid=838 comm="apparmor_parser" [ 30.077243] audit: type=1400 audit(1606970072.151:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-xpdfimport" pid=840 comm="apparmor_parser" [ 30.111849] audit: type=1400 audit(1606970072.183:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=841 comm="apparmor_parser" [ 30.111851] audit: type=1400 audit(1606970072.183:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=841 comm="apparmor_parser" [ 30.149902] audit: type=1400 audit(1606970072.223:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=836 comm="apparmor_parser" [ 30.149904] audit: type=1400 audit(1606970072.223:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=836 comm="apparmor_parser" [ 30.149905] audit: type=1400 audit(1606970072.223:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=836 comm="apparmor_parser" [ 30.218342] audit: type=1400 audit(1606970072.291:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-oopslash" pid=837 comm="apparmor_parser" [ 30.222701] audit: type=1400 audit(1606970072.295:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=842 comm="apparmor_parser" [ 30.231812] audit: type=1400 audit(1606970072.303:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ippusbxd" pid=844 comm="apparmor_parser" [ 43.097022] audit: type=1400 audit(1606970085.171:42): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/mysqld" pid=1172 comm="apparmor_parser" [ 384.496315] audit: type=1400 audit(1606970426.286:43): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine" pid=2624 comm="apparmor_parser" [ 384.496460] audit: type=1400 audit(1606970426.286:44): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=2624 comm="apparmor_parser" [ 386.037170] audit: type=1400 audit(1606970427.827:45): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.core.hook.configure" pid=2627 comm="apparmor_parser" [ 386.039815] audit: type=1400 audit(1606970427.827:46): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.core" pid=2629 comm="apparmor_parser" [ 386.039881] audit: type=1400 audit(1606970427.827:47): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.vlc" pid=2630 comm="apparmor_parser" [ 386.043373] audit: type=1400 audit(1606970427.831:48): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.vlc.vlc" pid=2631 comm="apparmor_parser" [ 398.038785] audit: type=1400 audit(1606970439.868:49): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine" pid=2692 comm="apparmor_parser" [ 398.055731] audit: type=1400 audit(1606970439.888:50): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=2692 comm="apparmor_parser" [ 398.269732] audit: type=1400 audit(1606970440.101:51): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.vlc" pid=2694 comm="apparmor_parser" [ 398.331835] audit: type=1400 audit(1606970440.165:52): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.core.hook.configure" pid=2696 comm="apparmor_parser" [ 398.609552] audit: type=1400 audit(1606970440.442:53): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.vlc.vlc" pid=2695 comm="apparmor_parser" [ 398.612558] audit: type=1400 audit(1606970440.446:54): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.core" pid=2698 comm="apparmor_parser" [ 3524.601395] systemd[1]: systemd 245.4-4ubuntu3.3 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid) [ 7922.157245] SGI XFS with ACLs, security attributes, realtime, no debug enabled [ 8485.045583] audit: type=1400 audit(1606978527.484:55): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/tcpdump" pid=26009 comm="apparmor_parser" [ 8552.002094] audit: type=1400 audit(1606978594.445:56): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=26633 comm="apparmor_parser" [ 8552.002417] audit: type=1400 audit(1606978594.445:57): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=26633 comm="apparmor_parser" [ 8552.002726] audit: type=1400 audit(1606978594.449:58): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=26633 comm="apparmor_parser" [ 8552.003108] audit: type=1400 audit(1606978594.449:59): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/{,usr/}sbin/dhclient" pid=26633 comm="apparmor_parser" [ 8968.481054] audit: type=1400 audit(1606979010.959:60): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/man" pid=31114 comm="apparmor_parser" [ 8968.481276] audit: type=1400 audit(1606979010.959:61): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_filter" pid=31114 comm="apparmor_parser" [ 8968.481511] audit: type=1400 audit(1606979010.959:62): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_groff" pid=31114 comm="apparmor_parser" [ 8998.922839] audit: type=1400 audit(1606979041.406:63): apparmor="DENIED" operation="open" profile="/sbin/dhclient" name="/proc/31551/task/31552/comm" pid=31551 comm="dhclient" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 8998.923135] audit: type=1400 audit(1606979041.406:64): apparmor="DENIED" operation="open" profile="/sbin/dhclient" name="/proc/31551/task/31553/comm" pid=31551 comm="dhclient" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 8998.923248] audit: type=1400 audit(1606979041.406:65): apparmor="DENIED" operation="open" profile="/sbin/dhclient" name="/proc/31551/task/31554/comm" pid=31551 comm="dhclient" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 8999.914529] audit: type=1400 audit(1606979042.398:66): apparmor="DENIED" operation="open" profile="/sbin/dhclient" name="/proc/31565/task/31566/comm" pid=31565 comm="dhclient" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 8999.914908] audit: type=1400 audit(1606979042.398:67): apparmor="DENIED" operation="open" profile="/sbin/dhclient" name="/proc/31565/task/31567/comm" pid=31565 comm="dhclient" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 8999.915074] audit: type=1400 audit(1606979042.398:68): apparmor="DENIED" operation="open" profile="/sbin/dhclient" name="/proc/31565/task/31568/comm" pid=31565 comm="dhclient" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [ 9033.242262] audit: type=1400 audit(1606979075.725:69): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lsb_release" pid=31775 comm="apparmor_parser" [ 9033.281867] audit: type=1400 audit(1606979075.765:70): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=31781 comm="apparmor_parser" [ 9033.282105] audit: type=1400 audit(1606979075.765:71): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=31781 comm="apparmor_parser" [ 9034.382930] audit: type=1400 audit(1606979076.869:72): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="nvidia_modprobe" pid=31874 comm="apparmor_parser" [ 9034.402641] audit: type=1400 audit(1606979076.885:73): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="nvidia_modprobe//kmod" pid=31874 comm="apparmor_parser" [ 9034.465306] audit: type=1400 audit(1606979076.949:74): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-senddoc" pid=31879 comm="apparmor_parser" [ 9034.474339] audit: type=1400 audit(1606979076.957:75): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/tcpdump" pid=31871 comm="apparmor_parser" [ 9034.491528] audit: type=1400 audit(1606979076.977:76): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cups-browsed" pid=31873 comm="apparmor_parser" [ 9034.526536] audit: type=1400 audit(1606979077.009:77): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=31872 comm="apparmor_parser" [ 9034.526959] audit: type=1400 audit(1606979077.013:78): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=31872 comm="apparmor_parser" [ 9350.165927] audit: type=1400 audit(1606979392.679:134): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/snapd/snap-confine" pid=5046 comm="apparmor_parser" [ 9350.181748] audit: type=1400 audit(1606979392.695:135): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=5046 comm="apparmor_parser" [ 9352.413899] audit: type=1400 audit(1606979394.923:136): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.core" pid=5171 comm="apparmor_parser" [ 9352.578100] audit: type=1400 audit(1606979395.087:137): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.vlc" pid=5172 comm="apparmor_parser" [ 9352.622752] audit: type=1400 audit(1606979395.131:138): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.core.hook.configure" pid=5173 comm="apparmor_parser" [ 9352.780902] audit: type=1400 audit(1606979395.291:139): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine" pid=5170 comm="apparmor_parser" [ 9352.796534] audit: type=1400 audit(1606979395.307:140): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=5170 comm="apparmor_parser" [ 9352.863267] audit: type=1400 audit(1606979395.371:141): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.vlc.vlc" pid=5174 comm="apparmor_parser" [ 9355.597438] audit: type=1400 audit(1606979398.107:142): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine" pid=5212 comm="apparmor_parser" [ 9355.624642] audit: type=1400 audit(1606979398.135:143): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/snap/core/10444/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=5212 comm="apparmor_parser" [ 9355.639564] audit: type=1400 audit(1606979398.147:144): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.vlc" pid=5214 comm="apparmor_parser" [ 9355.640815] audit: type=1400 audit(1606979398.151:145): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.core" pid=5216 comm="apparmor_parser" [ 9355.642706] audit: type=1400 audit(1606979398.151:146): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.core.hook.configure" pid=5217 comm="apparmor_parser" [ 9355.645871] audit: type=1400 audit(1606979398.155:147): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.vlc.vlc" pid=5215 comm="apparmor_parser" [ 9360.872746] audit: type=1400 audit(1606979403.384:148): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/mysqld" pid=5315 comm="apparmor_parser" [ 9481.004551] audit: type=1400 audit(1606979523.526:149): apparmor="STATUS" operation="profile_load" profile="unconfined" name="ippusbxd" pid=6502 comm="apparmor_parser" [ 9507.859430] audit: type=1400 audit(1606979550.380:150): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=6913 comm="apparmor_parser" [ 9507.859839] audit: type=1400 audit(1606979550.384:151): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=6913 comm="apparmor_parser" [ 9507.884477] audit: type=1400 audit(1606979550.408:152): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=6913 comm="apparmor_parser" [ 9836.246489] audit: type=1400 audit(1606979878.795:153): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cups-browsed" pid=16071 comm="apparmor_parser" [ 9840.743729] audit: type=1400 audit(1606979883.291:154): apparmor="DENIED" operation="capable" profile="/usr/sbin/cups-browsed" pid=16165 comm="cups-browsed" capability=23 capname="sys_nice" [10132.409700] audit: type=1400 audit(1606980174.984:155): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince" pid=19365 comm="apparmor_parser" [10132.429198] audit: type=1400 audit(1606980175.004:156): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince//sanitized_helper" pid=19365 comm="apparmor_parser" [10132.430455] audit: type=1400 audit(1606980175.004:157): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-previewer" pid=19365 comm="apparmor_parser" [10132.453126] audit: type=1400 audit(1606980175.028:158): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-previewer//sanitized_helper" pid=19365 comm="apparmor_parser" [10132.453916] audit: type=1400 audit(1606980175.028:159): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-thumbnailer" pid=19365 comm="apparmor_parser" [10156.407561] audit: type=1400 audit(1606980198.986:160): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-oopslash" pid=19573 comm="apparmor_parser" [10156.430992] audit: type=1400 audit(1606980199.010:161): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-senddoc" pid=19576 comm="apparmor_parser" [10160.452765] audit: type=1400 audit(1606980203.030:162): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-soffice" pid=19579 comm="apparmor_parser" [10160.471105] audit: type=1400 audit(1606980203.050:163): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-soffice//gpg" pid=19579 comm="apparmor_parser" [10160.495606] audit: type=1400 audit(1606980203.074:164): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-xpdfimport" pid=19582 comm="apparmor_parser" [10370.394058] audit: type=1400 audit(1606980412.987:165): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/mysqld" pid=11438 comm="apparmor_parser"