Awesome, thanks very much Ryan!

On Fri, Feb 21, 2025 at 4:00 AM Ryan Lee <ryan....@canonical.com> wrote:

> Hi Jordan,
>
> This is an issue that was reported in Launchpad at
> https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2098838. We
> are aware of what's broken and am working on a fixed AppArmor package
> that should resolve this breakage.
>
> Ryan
>
>
> On Thu, Feb 20, 2025 at 5:49 AM Jordan Esh <esh.jor...@gmail.com> wrote:
> >
> > I have recently upgraded to Ubuntu 25.04 (Plucky Puffin) on my laptop,
> and have been unable to successfully enable Wi-Fi.
> > After doing some digging, it seems that the configuration in the
> wpa_supplicant profile for AppArmor might be the issue, as requests to
> create a netlink socket and open the HW device are being denied.
> > I'm new to AppArmor, but if somebody could point me in the right
> direction, I'm happy to test some changes to the profile and open a PR on
> GitLab. Any help would be greatly appreciated :)
> >
> > Device: ThinkPad-E470
> > AppArmor: amd64 4.1.0~beta5-0ubuntu2
> > Distro: Ubuntu 25.04
> > Kernel 6.12.0-15-generic
> >
> > Relevant dmesg output:
> >>
> >> [ 8667.092192] audit: type=1400 audit(1740054455.567:405):
> apparmor="DENIED" operation="create" class="net" profile="wpa_supplicant"
> pid=13506 comm="wpa_supplicant" family="netlink" sock_type="raw" protocol=0
> requested="create" denied="create"
> >> [ 8667.092289] audit: type=1400 audit(1740054455.568:408):
> apparmor="DENIED" operation="open" class="file" profile="wpa_supplicant"
> name="/sys/devices/pci0000:00/0000:00:1d.3/0000:05:00.0/ieee80211/phy0/name"
> pid=13506 comm="wpa_supplicant" requested_mask="r" denied_mask="r" fsuid=0
> ouid=0
> >> [ 8667.092303] audit: type=1400 audit(1740054455.568:409):
> apparmor="DENIED" operation="create" class="net" profile="wpa_supplicant"
> pid=13506 comm="wpa_supplicant" family="inet" sock_type="dgram" protocol=0
> requested="create" denied="create"
> >> [ 9502.961011] audit: type=1107 audit(1740055291.439:410): pid=1323
> uid=101 auid=4294967295 ses=4294967295 subj=unconfined
> msg='apparmor="DENIED" operation="dbus_method_call" bus="system"
> path="/fi/w1/wpa_supplicant1" interface="org.freedesktop.DBus.Properties"
> member="GetAll" name=":1.287" mask="receive" pid=15679
> label="wpa_supplicant" peer_pid=13634 peer_label="unconfined"
> >
> >
> > wpa_supplicant systemctl status output:
> >>
> >> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> >> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> >> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0:
> Failed to initialize driver interface
> >> Feb 20 23:44:09 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0:
> CTRL-EVENT-DSCP-POLICY clear_all
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: netlink:
> Failed to open netlink socket: Permission denied
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: Failed to
> initialize driver 'nl80211'
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]:
> socket(PF_INET,SOCK_DGRAM): Permission denied
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0:
> Failed to initialize driver interface
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 wpa_supplicant[15679]: wlp5s0:
> CTRL-EVENT-DSCP-POLICY clear_all
> >
> >
> > NetworkManager systemctl status output:
> >>
> >> Feb 20 23:43:39 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055419.5700] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> >> Feb 20 23:43:49 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
> [1740055429.5650] device (wlp5s0): re-acquiring supplicant interface (#2).
> >> Feb 20 23:43:49 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055429.5660] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> >> Feb 20 23:43:59 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
> [1740055439.5657] device (wlp5s0): re-acquiring supplicant interface (#3).
> >> Feb 20 23:43:59 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055439.5714] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> >> Feb 20 23:44:09 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
> [1740055449.5719] device (wlp5s0): re-acquiring supplicant interface (#4).
> >> Feb 20 23:44:09 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055449.5763] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <warn>
> [1740055459.5658] device (wlp5s0): re-acquiring supplicant interface (#5).
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <error>
> [1740055459.5712] device (wlp5s0): Couldn't initialize supplicant
> interface: GDBus.Error:fi.w1.wpa_supplicant1.UnknownError: wpa_supplicant
> couldn't grab this interface.
> >> Feb 20 23:44:19 jordan-ThinkPad-E470 NetworkManager[16051]: <info>
> [1740055459.5713] device (wlp5s0): supplicant interface keeps failing,
> giving up
> >
> >
>

Reply via email to