Ubuntu
ubuntu-advantage-tools package

  1. Xenial (16.04)
  2. Bug #2067810
  3. Comment #5

Comment 5 for bug 2067810

Revision history for this message
Andreas Hasenack (ahasenack) wrote : Re: New Apparmor denial with ubuntu-advantage-tools on bionic

Ok, we found a reproducer:

sudo dpkg --add-architecture i386

Then either command will trigger the DENIED:

sudo aa-exec -p ubuntu_pro_esm_cache//dpkg dpkg --print-foreign-architecture
sudo aa-exec -p ubuntu_pro_esm_cache apt-cache policy

Just the presence of /var/lib/dpkg/arch will trigger it, even if it's empty. If the file does not exist, then there is no apparmor DENIED.

We will apply your patch.