# Testing series focal ########################################### Creating focal-2067810 Starting focal-2067810 Waiting for container IP ..............Waiting for container ssh ....Connection to 10.0.102.70 22 port [tcp/ssh] succeeded! Waiting for cloud-init to be done # Latest u-a-t is installed ########################################### ubuntu-advantage-tools: Installed: 32.3~20.04 Candidate: 32.3~20.04 Version table: *** 32.3~20.04 500 500 http://br.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages 100 /var/lib/dpkg/status 20.3 500 500 http://br.archive.ubuntu.com/ubuntu focal/main amd64 Packages ########################################### # Creating conditions for the bug ########################################### ########################################### # Reproducing the bug ########################################### # Triggering apparmor DENIED messages ########################################### # aa-exec -p ubuntu_pro_esm_cache//dpkg dpkg --print-foreign-architectures # dmesg: [Fri Jun 21 20:35:31 2024] audit: type=1400 audit(1719002131.528:40): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//dpkg" name="/var/lib/dpkg/arch" pid=1599 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 # aa-exec -p ubuntu_pro_esm_cache apt-cache policy | head Package files: 100 /var/lib/dpkg/status release a=now 500 http://br.archive.ubuntu.com/ubuntu focal-security/multiverse amd64 Packages release v=20.04,o=Ubuntu,a=focal-security,n=focal,l=Ubuntu,c=multiverse,b=amd64 origin br.archive.ubuntu.com 500 http://br.archive.ubuntu.com/ubuntu focal-security/universe amd64 Packages release v=20.04,o=Ubuntu,a=focal-security,n=focal,l=Ubuntu,c=universe,b=amd64 origin br.archive.ubuntu.com 500 http://br.archive.ubuntu.com/ubuntu focal-security/restricted amd64 Packages # dmesg: [Fri Jun 21 20:35:31 2024] audit: type=1400 audit(1719002131.908:41): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//dpkg" name="/var/lib/dpkg/arch" pid=1607 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [Fri Jun 21 20:35:31 2024] audit: type=1400 audit(1719002131.928:42): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//dpkg" name="/var/lib/dpkg/arch" pid=1608 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 # esm-cache.service test ########################################### # /var/lib/apt/periodic/ contents ########################################### total 8 drwxr-xr-x 2 root root 4096 Jun 21 20:35 . drwxr-xr-x 5 root root 4096 Jun 21 20:35 .. # systemctl start esm-cache.service # dmesg: [Fri Jun 21 20:35:32 2024] audit: type=1400 audit(1719002132.644:43): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//dpkg" name="/var/lib/dpkg/arch" pid=1622 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [Fri Jun 21 20:35:32 2024] audit: type=1400 audit(1719002132.644:44): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//dpkg" name="/var/lib/dpkg/arch" pid=1623 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [Fri Jun 21 20:35:33 2024] audit: type=1400 audit(1719002133.300:45): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//apt_methods_gpgv" name="/var/lib/dpkg/arch" pid=1632 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=105 ouid=0 [Fri Jun 21 20:35:33 2024] audit: type=1400 audit(1719002133.304:46): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//apt_methods_gpgv" name="/var/lib/dpkg/arch" pid=1634 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=105 ouid=0 [Fri Jun 21 20:35:33 2024] audit: type=1400 audit(1719002133.304:47): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//apt_methods_gpgv" name="/var/lib/dpkg/arch" pid=1636 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=105 ouid=0 [Fri Jun 21 20:35:33 2024] audit: type=1400 audit(1719002133.308:48): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//apt_methods_gpgv" name="/var/lib/dpkg/arch" pid=1638 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=105 ouid=0 [Fri Jun 21 20:35:33 2024] audit: type=1400 audit(1719002133.312:49): apparmor="DENIED" operation="open" profile="ubuntu_pro_esm_cache//apt_methods_gpgv" name="/var/lib/dpkg/arch" pid=1641 comm="dpkg" requested_mask="r" denied_mask="r" fsuid=105 ouid=0 # Updating to proposed ########################################### deb http://archive.ubuntu.com/ubuntu focal-proposed main dpkg-preconfigure: unable to re-open stdin: No such file or directory ubuntu-advantage-tools: Installed: 32.3.1~20.04 Candidate: 32.3.1~20.04 Version table: *** 32.3.1~20.04 500 500 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 Packages 100 /var/lib/dpkg/status 32.3~20.04 500 500 http://br.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages 20.3 500 500 http://br.archive.ubuntu.com/ubuntu focal/main amd64 Packages # Now there must be no apparmor DENIED messages ########################################### # Triggering apparmor DENIED messages ########################################### # aa-exec -p ubuntu_pro_esm_cache//dpkg dpkg --print-foreign-architectures # dmesg: # aa-exec -p ubuntu_pro_esm_cache apt-cache policy | head Package files: 100 /var/lib/dpkg/status release a=now 500 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 Packages release v=20.04,o=Ubuntu,a=focal-proposed,n=focal,l=Ubuntu,c=main,b=amd64 origin archive.ubuntu.com 500 http://br.archive.ubuntu.com/ubuntu focal-security/multiverse amd64 Packages release v=20.04,o=Ubuntu,a=focal-security,n=focal,l=Ubuntu,c=multiverse,b=amd64 origin br.archive.ubuntu.com 500 http://br.archive.ubuntu.com/ubuntu focal-security/universe amd64 Packages # dmesg: # esm-cache.service test ########################################### # /var/lib/apt/periodic/ contents ########################################### total 8 drwxr-xr-x 2 root root 4096 Jun 21 20:35 . drwxr-xr-x 5 root root 4096 Jun 21 20:35 .. # systemctl start esm-cache.service # dmesg: TEST SUCCEEDED