[Pkg-utopia-maintainers] Bug#1056313: network-manager: breaks networking

[Vincent Lefevre]

Package: network-manager
Version: 1.44.2-4
Severity: grave
Justification: renders package unusable

Just after the upgrade of network-manager from 1.44.2-1 to 1.44.2-4,
my network is down.

In the journalctl logs, I can see

[...]
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0092] policy: auto-activating connection 'Wired connection 1' (c89d3bc3-8d9e-44f8-ac86-7e6884d08219)
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0098] device (enp0s25): Activation: starting connection 'Wired connection 1' (c89d3bc3-8d9e-44f8-ac86-7e6884d08219)
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0099] device (enp0s25): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed')
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0103] manager: NetworkManager state is now CONNECTING
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0106] device (enp0s25): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0116] device (enp0s25): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed')
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0122] dhcp4 (enp0s25): activation: beginning transaction (timeout in 45 seconds)
Nov 20 12:08:58 cventin NetworkManager[286424]: <info>  [1700478538.0158] dhcp4 (enp0s25): dhclient started with pid 294230
Nov 20 12:08:58 cventin avahi-daemon[758]: Joining mDNS multicast group on interface enp0s25.IPv6 with address fe80::9a90:96ff:febd:7ff7.
Nov 20 12:08:58 cventin avahi-daemon[758]: New relevant interface enp0s25.IPv6 for mDNS.
Nov 20 12:08:58 cventin avahi-daemon[758]: Registering new address record for fe80::9a90:96ff:febd:7ff7 on enp0s25.*.
Nov 20 12:08:58 cventin dhclient[294231]: execve (/usr/libexec/nm-dhcp-helper, ...): Permission denied
Nov 20 12:08:58 cventin kernel: audit: type=1400 audit(1700478538.018:40): apparmor="DENIED" operation="exec" class="file" profile="/{,usr/}sbin/dhclient" name="/usr/libexec/nm-dhcp-helper" pid=294231 comm="dhclient" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
Nov 20 12:08:58 cventin dhclient[294230]: DHCPREQUEST for 140.77.13.17 on enp0s25 to 255.255.255.255 port 67
Nov 20 12:08:58 cventin dhclient[294230]: DHCPACK of 140.77.13.17 from 140.77.1.11
Nov 20 12:08:58 cventin dhclient[294233]: execve (/usr/libexec/nm-dhcp-helper, ...): Permission denied
Nov 20 12:08:58 cventin kernel: audit: type=1400 audit(1700478538.042:41): apparmor="DENIED" operation="exec" class="file" profile="/{,usr/}sbin/dhclient" name="/usr/libexec/nm-dhcp-helper" pid=294233 comm="dhclient" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
Nov 20 12:08:58 cventin dhclient[294230]: bound to 140.77.13.17 -- renewal in 36738 seconds.
[...]

The issue disappeared after downgrading back to 1.44.2-1.

Note: the errors about /usr/libexec/nm-dhcp-helper changed to

Nov 20 12:17:42 cventin dhclient[295468]: execve (/usr/libexec/nm-dhcp-helper, ...): No such file or directory

but the network is working. I don't whether this is related, though.

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.5.0-4-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages network-manager depends on:
ii  adduser                         3.137
ii  dbus [default-dbus-system-bus]  1.14.10-3
ii  libaudit1                       1:3.1.1-1
ii  libbluetooth3                   5.70-1
ii  libc6                           2.37-12
ii  libcurl3-gnutls                 8.4.0-2
ii  libglib2.0-0                    2.78.1-4
ii  libgnutls30                     3.8.1-4+b1
ii  libjansson4                     2.14-2
ii  libmm-glib0                     1.22.0-1
ii  libndp0                         1.8-1
ii  libnewt0.52                     0.52.24-1
ii  libnm0                          1.44.2-4
ii  libpsl5                         0.21.2-1+b1
ii  libreadline8                    8.2-1.3
ii  libselinux1                     3.5-1
ii  libsystemd0                     254.5-1
ii  libteamdctl0                    1.31-1
ii  libudev1                        254.5-1
ii  polkitd                         123-3
ii  udev                            254.5-1

Versions of packages network-manager recommends:
ii  dnsmasq-base [dnsmasq-base]  2.89-1
ii  libpam-systemd               254.5-1
ii  modemmanager                 1.22.0-1
pn  ppp                          <none>
ii  wireless-regdb               2022.06.06-1
ii  wpasupplicant                2:2.10-15

Versions of packages network-manager suggests:
ii  iptables       1.8.9-2
pn  libteam-utils  <none>

Versions of packages network-manager is related to:
ii  isc-dhcp-client  4.4.3-P1-4

-- no debconf information

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)