I have recently upgraded to Ubuntu 25.04 (Plucky Puffin) on my laptop, and
have been unable to successfully enable Wi-Fi.
After doing some digging, it seems that the configuration in the
wpa_supplicant profile for AppArmor might be the issue, as requests to
create a netlink socket and open the HW device are being denied.
I'm new to AppArmor, but if somebody could point me in the right direction,
I'm happy to test some changes to the profile and open a PR on GitLab. Any
help would be greatly appreciated :)

Device: ThinkPad-E470
AppArmor: amd64 4.1.0~beta5-0ubuntu2
Distro: Ubuntu 25.04
Kernel 6.12.0-15-generic

Relevant dmesg output:

> [ 8667.092192] audit: type=1400 audit(1740054455.567:405):
> apparmor="DENIED" operation="create" class="net" profile="wpa_supplicant"
> pid=13506 comm="wpa_supplicant" family="netlink" sock_type="raw" protocol=0
> requested="create" denied="create"
> [ 8667.092289] audit: type=1400 audit(1740054455.568:408):
> apparmor="DENIED" operation="open" class="file" profile="wpa_supplicant"
> name="/sys/devices/pci0000:00/0000:00:1d.3/0000:05:00.0/ieee80211/phy0/name"
> pid=13506 comm="wpa_supplicant" requested_mask="r" denied_mask="r" fsuid=0
> ouid=0
> [ 8667.092303] audit: type=1400 audit(1740054455.568:409):
> apparmor="DENIED" operation="create" class="net" profile="wpa_supplicant"
> pid=13506 comm="wpa_supplicant" family="inet" sock_type="dgram" protocol=0
> requested="create" denied="create"
> [ 9502.961011] audit: type=1107 audit(1740055291.439:410): pid=1323
> uid=101 auid=4294967295 ses=4294967295 subj=unconfined
> msg='apparmor="DENIED" operation="dbus_method_call" bus="system"
> path="/fi/w1/wpa_supplicant1" interface="org.freedesktop.DBus.Properties"
> member="GetAll" name=":1.287" mask="receive" pid=15679
> label="wpa_supplicant" peer_pid=13634 peer_label="unconfined"


wpa_supplicant systemctl status output:

> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0: Failed
> to initialize driver interface
> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0:
> CTRL-EVENT-DSCP-POLICY clear_all
> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: netlink:
> Failed to open netlink socket: Permission denied
> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: Failed to
> initialize driver 'nl80211'
> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0: Failed
> to initialize driver interface
> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0:
> CTRL-EVENT-DSCP-POLICY clear_all


NetworkManager systemctl status output:
>
> Feb 20 23:43:39 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055419.5700] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> Feb 20 23:43:49 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
>  [1740055429.5650] device (wlp5s0): re-acquiring supplicant interface (#2).
> Feb 20 23:43:49 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055429.5660] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> Feb 20 23:43:59 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
>  [1740055439.5657] device (wlp5s0): re-acquiring supplicant interface (#3).
> Feb 20 23:43:59 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055439.5714] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> Feb 20 23:44:09 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
>  [1740055449.5719] device (wlp5s0): re-acquiring supplicant interface (#4).
> Feb 20 23:44:09 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055449.5763] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
>  [1740055459.5658] device (wlp5s0): re-acquiring supplicant interface (#5).
> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055459.5712] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <info>
>  [1740055459.5713] device (wlp5s0): supplicant interface keeps failing,
> giving up

Reply via email to