[Bug 1901373] Re: isc-dhcp-server AppArmor Denied on /proc/sys/net/ipv4/ip_local_port_range

[Norman Henderson]

Proposed fix does not work for me, gives AppArmor parser error at line
3: Found unexpected character '''

I am also puzzled that this apparmor profile is completely different in form than others proposed e.g. at:
https://github.com/Harvie/AppArmor-Profiles/blob/master/usr.sbin.dhcpd
???

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to isc-dhcp in Ubuntu.
https://bugs.launchpad.net/bugs/1901373

Title:
  isc-dhcp-server AppArmor Denied on
  /proc/sys/net/ipv4/ip_local_port_range

Status in isc-dhcp package in Ubuntu:
  Confirmed

Bug description:
  The following AppArmor denial errors are shown on startup:

  Oct 25 00:52:00 xxx kernel: [  556.231990] audit: type=1400 audit(1603601520.710:32): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/sys/net/ipv4/ip_local_port_range" pid=1982 comm="dhcpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
  Oct 25 00:52:00 xxx kernel: [  556.232257] audit: type=1400 audit(1603601520.710:33): apparmor="DENIED" operation="open" profile="/usr/sbin/dhcpd" name="/proc/sys/net/ipv4/ip_local_port_range" pid=1982 comm="dhcpd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

  
  Fix is to edit /etc/apparmor.d/local/usr.sbin.dhcpd to have:
  @{PROC}/sys/net/ipv4/ip_local_port_range r,


  'lsb_release -rd':
  Description:    Ubuntu 20.04.1 LTS
  Release:        20.04

  isc-dhcp-server:
    Installed: 4.4.1-2.1ubuntu5
    Candidate: 4.4.1-2.1ubuntu5
    Version table:
   *** 4.4.1-2.1ubuntu5 500
          500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages
          100 /var/lib/dpkg/status

  apparmor:
    Installed: 2.13.3-7ubuntu5.1
    Candidate: 2.13.3-7ubuntu5.1
    Version table:
   *** 2.13.3-7ubuntu5.1 500
          500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
          100 /var/lib/dpkg/status
       2.13.3-7ubuntu5 500
          500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/1901373/+subscriptions