Hi Jordan,

This is an issue that was reported in Launchpad at
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2098838. We
are aware of what's broken and am working on a fixed AppArmor package
that should resolve this breakage.

Ryan


On Thu, Feb 20, 2025 at 5:49 AM Jordan Esh <esh.jor...@gmail.com> wrote:
>
> I have recently upgraded to Ubuntu 25.04 (Plucky Puffin) on my laptop, and 
> have been unable to successfully enable Wi-Fi.
> After doing some digging, it seems that the configuration in the 
> wpa_supplicant profile for AppArmor might be the issue, as requests to create 
> a netlink socket and open the HW device are being denied.
> I'm new to AppArmor, but if somebody could point me in the right direction, 
> I'm happy to test some changes to the profile and open a PR on GitLab. Any 
> help would be greatly appreciated :)
>
> Device: ThinkPad-E470
> AppArmor: amd64 4.1.0~beta5-0ubuntu2
> Distro: Ubuntu 25.04
> Kernel 6.12.0-15-generic
>
> Relevant dmesg output:
>>
>> [ 8667.092192] audit: type=1400 audit(1740054455.567:405): apparmor="DENIED" 
>> operation="create" class="net" profile="wpa_supplicant" pid=13506 
>> comm="wpa_supplicant" family="netlink" sock_type="raw" protocol=0 
>> requested="create" denied="create"
>> [ 8667.092289] audit: type=1400 audit(1740054455.568:408): apparmor="DENIED" 
>> operation="open" class="file" profile="wpa_supplicant" 
>> name="/sys/devices/pci0000:00/0000:00:1d.3/0000:05:00.0/ieee80211/phy0/name" 
>> pid=13506 comm="wpa_supplicant" requested_mask="r" denied_mask="r" fsuid=0 
>> ouid=0
>> [ 8667.092303] audit: type=1400 audit(1740054455.568:409): apparmor="DENIED" 
>> operation="create" class="net" profile="wpa_supplicant" pid=13506 
>> comm="wpa_supplicant" family="inet" sock_type="dgram" protocol=0 
>> requested="create" denied="create"
>> [ 9502.961011] audit: type=1107 audit(1740055291.439:410): pid=1323 uid=101 
>> auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" 
>> operation="dbus_method_call" bus="system" path="/fi/w1/wpa_supplicant1" 
>> interface="org.freedesktop.DBus.Properties" member="GetAll" name=":1.287" 
>> mask="receive" pid=15679 label="wpa_supplicant" peer_pid=13634 
>> peer_label="unconfined"
>
>
> wpa_supplicant systemctl status output:
>>
>> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: 
>> socket(PF_INET,SOCK_DGRAM): Permission denied
>> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: 
>> socket(PF_INET,SOCK_DGRAM): Permission denied
>> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0: Failed 
>> to initialize driver interface
>> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0: 
>> CTRL-EVENT-DSCP-POLICY clear_all
>> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: netlink: Failed 
>> to open netlink socket: Permission denied
>> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: Failed to 
>> initialize driver 'nl80211'
>> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: 
>> socket(PF_INET,SOCK_DGRAM): Permission denied
>> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: 
>> socket(PF_INET,SOCK_DGRAM): Permission denied
>> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0: Failed 
>> to initialize driver interface
>> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0: 
>> CTRL-EVENT-DSCP-POLICY clear_all
>
>
> NetworkManager systemctl status output:
>>
>> Feb 20 23:43:39 jordan-ThinkPad-E470 NetworkManager[16051]: <error> 
>> [1740055419.5700] device (wlp5s0): Couldn't initialize supplicant interface: 
>> GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant couldn't grab 
>> this interface.
>> Feb 20 23:43:49 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>  
>> [1740055429.5650] device (wlp5s0): re-acquiring supplicant interface (#2).
>> Feb 20 23:43:49 jordan-ThinkPad-E470 NetworkManager[16051]: <error> 
>> [1740055429.5660] device (wlp5s0): Couldn't initialize supplicant interface: 
>> GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant couldn't grab 
>> this interface.
>> Feb 20 23:43:59 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>  
>> [1740055439.5657] device (wlp5s0): re-acquiring supplicant interface (#3).
>> Feb 20 23:43:59 jordan-ThinkPad-E470 NetworkManager[16051]: <error> 
>> [1740055439.5714] device (wlp5s0): Couldn't initialize supplicant interface: 
>> GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant couldn't grab 
>> this interface.
>> Feb 20 23:44:09 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>  
>> [1740055449.5719] device (wlp5s0): re-acquiring supplicant interface (#4).
>> Feb 20 23:44:09 jordan-ThinkPad-E470 NetworkManager[16051]: <error> 
>> [1740055449.5763] device (wlp5s0): Couldn't initialize supplicant interface: 
>> GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant couldn't grab 
>> this interface.
>> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>  
>> [1740055459.5658] device (wlp5s0): re-acquiring supplicant interface (#5).
>> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <error> 
>> [1740055459.5712] device (wlp5s0): Couldn't initialize supplicant interface: 
>> GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant couldn't grab 
>> this interface.
>> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <info>  
>> [1740055459.5713] device (wlp5s0): supplicant interface keeps failing, 
>> giving up
>
>

Reply via email to