[Bug 1080401] [NEW] Apparmor permissions do not allow avahi-daemon to run

[doclist]

Public bug reported:

Apparmor permissions do not allow avahi-daemon to run


% sudo avahi-daemon --debug --no-drop-root                     
open(/var/run/avahi-daemon//pid): Permission denied
Failed to create PID file: Permission denied

Nov 18 12:37:12 machine kernel: [ 1899.121695] type=1400 audit(1353260232.550:230): apparmor="DENIED" operation="chown" parent=12235 profile="/usr/sbin/avahi-daemon" name="/run/avahi-daemon/" pid=12236 comm="avahi-daemon" requested_mask="w" denied_mask="w" fsuid=0 ouid=104
Nov 18 12:37:12 machine kernel: [ 1899.121721] type=1400 audit(1353260232.550:231): apparmor="DENIED" operation="mknod" parent=12235 profile="/usr/sbin/avahi-daemon" name="/run/avahi-daemon/pid" pid=12236 comm="avahi-daemon" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

I don't know why name="/run/avahi-daemon" and not "/var/run/avahi-
daemon". ltrace appears to show the latter being used.

** Affects: avahi (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to avahi in Ubuntu.
https://bugs.launchpad.net/bugs/1080401

Title:
  Apparmor permissions do not allow avahi-daemon to run

Status in “avahi” package in Ubuntu:
  New

Bug description:
  Apparmor permissions do not allow avahi-daemon to run

  
  % sudo avahi-daemon --debug --no-drop-root                     
  open(/var/run/avahi-daemon//pid): Permission denied
  Failed to create PID file: Permission denied

  Nov 18 12:37:12 machine kernel: [ 1899.121695] type=1400 audit(1353260232.550:230): apparmor="DENIED" operation="chown" parent=12235 profile="/usr/sbin/avahi-daemon" name="/run/avahi-daemon/" pid=12236 comm="avahi-daemon" requested_mask="w" denied_mask="w" fsuid=0 ouid=104
  Nov 18 12:37:12 machine kernel: [ 1899.121721] type=1400 audit(1353260232.550:231): apparmor="DENIED" operation="mknod" parent=12235 profile="/usr/sbin/avahi-daemon" name="/run/avahi-daemon/pid" pid=12236 comm="avahi-daemon" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

  I don't know why name="/run/avahi-daemon" and not "/var/run/avahi-
  daemon". ltrace appears to show the latter being used.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1080401/+subscriptions