[Bug 2011628] Re: Apparmor Disallows Disabling Dhclient Scripts

[Christian Ehrhardt ]

As reported in 2031398 this problem causes log-noise by apparmor denying it in older releases.
Gladly the impact is just the log (dhclient still works), but the change to the apparmor profile should be SRUed to avoid that.

** Also affects: isc-dhcp (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: isc-dhcp (Ubuntu Lunar)
   Importance: Undecided
       Status: New

** Also affects: isc-dhcp (Ubuntu Focal)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2011628

Title:
  Apparmor Disallows Disabling Dhclient Scripts

Status in isc-dhcp package in Ubuntu:
  Fix Released
Status in isc-dhcp source package in Focal:
  New
Status in isc-dhcp source package in Jammy:
  New
Status in isc-dhcp source package in Lunar:
  New
Status in isc-dhcp package in Debian:
  New

Bug description:
  In some cases, it may be desirable to disable dhclient scripts. By
  default /sbin/dhclient-script is used, and some others are allowed by
  the apparmor profile.

  Without Apparmor, disabling hook scripts can be accomplished with
  flags -sf /bin/true, but with apparmor enabled this gets blocked:

  execve (/bin/true, ...): Permission denied

  Unfortunately dhclient doesn't appear to provide any other mechanism
  for disabling hook scripts.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/2011628/+subscriptions