[Bug 588635] Re: apparmor profile for sbin.dhclient3 not compatible with wicd

[Adam Stokes]

** Description changed:

+ SRU:
+ 
+ [Impact]
+ Extends apparmor profile to work with wicd. There are quite a few users that depend on wicd so impact is proportionate to those affected.
+ 
+ [Test Case]
  Binary package hint: wicd
  
  I set some options for dhclient3 in /etc/wicd/dhclient.conf.template and
  noticed they were not being used. Some further searching showed me the
  following syslog entry:
  
  Jun  2 10:09:44 machiavelli kernel: [107612.391626] type=1503
  audit(1275466184.529:22):  operation="open" pid=28884 parent=28838
  profile="/sbin/dhclient3" requested_mask="r::" denied_mask="r::" fsuid=0
  ouid=0 name="/var/lib/wicd/dhclient.conf"
  
  Editing /etc/apparmor.d/sbin.dhclient3 with an entry:
  
-   # wicd
-   /var/lib/wicd/* r,
+   # wicd
+   /var/lib/wicd/* r,
  
  (and reloading apparmor) fixed the problem.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: wicd-daemon 1.7.0+ds1-2
  ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
  Uname: Linux 2.6.32-22-generic i686
  Architecture: i386
  Date: Wed Jun  2 10:22:30 2010
  PackageArchitecture: all
  ProcEnviron:
-  PATH=(custom, user)
-  LANG=en_US.utf8
-  SHELL=/bin/bash
+  PATH=(custom, user)
+  LANG=en_US.utf8
+  SHELL=/bin/bash
  SourcePackage: wicd
+ 
+ [Regression Potential]
+ The regression potential should be minimal as this extends apparmor to allow read access into /var/lib/wicd via dhclient

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to isc-dhcp in Ubuntu.
https://bugs.launchpad.net/bugs/588635

Title:
  apparmor profile for sbin.dhclient3 not compatible with wicd

Status in “isc-dhcp” package in Ubuntu:
  Fix Released
Status in “isc-dhcp” source package in Oneiric:
  New

Bug description:
  SRU:

  [Impact]
  Extends apparmor profile to work with wicd. There are quite a few users that depend on wicd so impact is proportionate to those affected.

  [Test Case]
  Binary package hint: wicd

  I set some options for dhclient3 in /etc/wicd/dhclient.conf.template
  and noticed they were not being used. Some further searching showed me
  the following syslog entry:

  Jun  2 10:09:44 machiavelli kernel: [107612.391626] type=1503
  audit(1275466184.529:22):  operation="open" pid=28884 parent=28838
  profile="/sbin/dhclient3" requested_mask="r::" denied_mask="r::"
  fsuid=0 ouid=0 name="/var/lib/wicd/dhclient.conf"

  Editing /etc/apparmor.d/sbin.dhclient3 with an entry:

    # wicd
    /var/lib/wicd/* r,

  (and reloading apparmor) fixed the problem.

  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: wicd-daemon 1.7.0+ds1-2
  ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
  Uname: Linux 2.6.32-22-generic i686
  Architecture: i386
  Date: Wed Jun  2 10:22:30 2010
  PackageArchitecture: all
  ProcEnviron:
   PATH=(custom, user)
   LANG=en_US.utf8
   SHELL=/bin/bash
  SourcePackage: wicd

  [Regression Potential]
  The regression potential should be minimal as this extends apparmor to allow read access into /var/lib/wicd via dhclient

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/588635/+subscriptions