[pkg-apparmor] Bug#881460: apparmor-profiles: dhclient set to enforce prevents getting an IPv4 with DHCP

Lorenzo Ancora lorenzolucio+bugs at live.it
Sat Jan 5 00:45:57 GMT 2019


Package: apparmor-profiles
Version: 2.13.1-3
Followup-For: Bug #881460

I've created a patch to resolve this bug. After applying the patch you should
link/copy the profile to /etc/apparmor.d, enforce the profile again (the kernel
ring buffer will show a STATUS message) and restart NetworkManager.
-------------- next part --------------
--- /usr/share/apparmor/extra-profiles/sbin.dhclient	2019-01-05 01:06:40.237744708 +0100
+++ /usr/share/apparmor/extra-profiles/sbin.dhclient	2019-01-05 01:14:07.325115590 +0100
@@ -51,6 +51,7 @@
   /usr/bin/vmstat             mrix,
   /usr/bin/w                  mrix,
   /usr/lib/nm-dhcp-helper     rix,
+  /usr/lib/NetworkManager/nm-dhcp-helper rix,
   /var/lib/dhcp/dhclient.leases     rw,
   /var/lib/dhcp/dhclient-*.leases   rw,
   /var/lib/dhcp6/dhclient.leases    rw,


More information about the pkg-apparmor-team mailing list