Ubuntu
apparmor package

usr.sbin.dnsmasq: NM integration

Bug #941808 reported by Felix Geyer
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
High
Jamie Strandboge
Ubuntu ubuntu-12.04-beta-2
Precise
Fix Released
High
Jamie Strandboge
Ubuntu ubuntu-12.04-beta-2

Bug Description

The usr.sbin.dnsmasq profile (shipped in apparmor-profiles) is missing a rule for NetworkManager integration which is used by default in Ubuntu:
  /{,var/}run/sendsigs.omit.d/network-manager.dnsmasq.pid rw,

The log message is:
Feb 25 20:40:56 felix-desktop kernel: [ 36.270505] type=1400 audit(1330198856.754:47): apparmor="DENIED" operation="mknod" parent=1588 profile="/usr/sbin/dnsmasq" name="/run/sendsigs.omit.d/network-manager.dnsmasq.pid" pid=2923 comm="dnsmasq" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

Jamie Strandboge (jdstrand)
Changed in apparmor (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → High
milestone: none → ubuntu-12.04-beta-2
status: New → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.7.99-0ubuntu2

---------------
apparmor (2.7.99-0ubuntu2) precise; urgency=low

  * debian/control: dh-apparmor should Breaks/Replaces on debhelper
    9.20120115ubuntu3, not 9.20120115ubuntu2
  * debian/patches/0006-lp941808.patch: allow writes to
    /{,var/}run/sendsigs.omit.d/*dnsmasq.pid for network manager integration
    (LP: #941808)
  * debian/patches/0007-lp941506.patch: allow reads to ~/.drirc in the X
    abstraction (LP: #941506)
  * debian/patches/0008-lp941503.patch: allow read access to
    /usr/share/texmf/fonts in fonts abstraction (LP: #941503)
  * debian/patches/0009-lp943161.patch: fix path to java in
    ubuntu-browsers.d/java (LP: #943161)
 -- Jamie Strandboge <email address hidden> Fri, 02 Mar 2012 07:50:50 -0600

Changed in apparmor (Ubuntu Precise):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.