> Sep 27 15:28:46 vsrv-bicab-2u charon: 12[IKE] maximum IKE_SA lifetime 10269s
> Sep 27 15:28:46 vsrv-bicab-2u charon: 12[IKE] adding DNS server failed
> Sep 27 15:28:46 vsrv-bicab-2u charon: 12[IKE] adding DNS server failed
> Sep 27 15:28:46 vsrv-bicab-2u charon: 12[CFG] handling INTERNAL_IP4_DNS 
> attribute failed

This sounds like Debian bug #915147 and a workaround/patch is given on
that bug report.

>  The line:
> #include <abstractions/nameservice>
> Should cover resolve.conf actions, but we'd have to understand exactly how 
> your strongswan is > configured triggering this issue and then consider 
> what/where to add apparmor rules for.

On Debian at least, this only covers read access, and write access is
needed by charon.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1786250

Title:
  strongswan (charon) is rejected by apparmor to read /proc/<PID>/fd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1786250/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to