[Bug 588635] Re: apparmor profile for sbin.dhclient3 not compatible with wicd

[Clint Byrum]

Hello Koos, or anyone else affected,

Accepted isc-dhcp into oneiric-proposed. The package will build now and
be available in a few hours. Please help us by testing this new package.
See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Your feedback will aid us getting this
update out to other Ubuntu users.  If this package fixes the bug for you
please change the bug tag from verification-needed to verification-done.
If it does not, change the tag to verification-failed.  In either case
details of your testing will help us make a better decision.  Further
information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in
advance!

** Changed in: isc-dhcp (Ubuntu Oneiric)
       Status: Confirmed => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to isc-dhcp in Ubuntu.
https://bugs.launchpad.net/bugs/588635

Title:
  apparmor profile for sbin.dhclient3 not compatible with wicd

Status in “isc-dhcp” package in Ubuntu:
  Fix Released
Status in “isc-dhcp” source package in Oneiric:
  Fix Committed

Bug description:
  SRU:

  [Impact]
  Extends apparmor profile to work with wicd. There are quite a few users that depend on wicd so impact is proportionate to those affected.

  [Test Case]
  Binary package hint: wicd

  I set some options for dhclient3 in /etc/wicd/dhclient.conf.template
  and noticed they were not being used. Some further searching showed me
  the following syslog entry:

  Jun  2 10:09:44 machiavelli kernel: [107612.391626] type=1503
  audit(1275466184.529:22):  operation="open" pid=28884 parent=28838
  profile="/sbin/dhclient3" requested_mask="r::" denied_mask="r::"
  fsuid=0 ouid=0 name="/var/lib/wicd/dhclient.conf"

  Editing /etc/apparmor.d/sbin.dhclient3 with an entry:

    # wicd
    /var/lib/wicd/* r,

  (and reloading apparmor) fixed the problem.

  ProblemType: Bug
  DistroRelease: Ubuntu 10.04
  Package: wicd-daemon 1.7.0+ds1-2
  ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
  Uname: Linux 2.6.32-22-generic i686
  Architecture: i386
  Date: Wed Jun  2 10:22:30 2010
  PackageArchitecture: all
  ProcEnviron:
   PATH=(custom, user)
   LANG=en_US.utf8
   SHELL=/bin/bash
  SourcePackage: wicd

  [Regression Potential]
  The regression potential should be minimal as this extends apparmor to allow read access into /var/lib/wicd via dhclient

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/isc-dhcp/+bug/588635/+subscriptions