does the trick. Apparently this happens because the NM tests unshare the file system namespace.
They do this because they mount tmpfses over /run/NetworkManager, /etc/NetworkManager and similar, so that they don't destroy the real files on the production system.
From discussion with Jamie: Changing /etc/apparmor. d/sbin. dhclient to
/usr/ lib/NetworkMana ger/nm- dhcp-client. action flags=( attach_ disconnected) {
does the trick. Apparently this happens because the NM tests unshare the file system namespace.
They do this because they mount tmpfses over /run/NetworkMan ager, /etc/NetworkManager and similar, so that they don't destroy the real files on the production system.