security.nesting: "true" security.privileged: "true"
But maybe looking for /proc/sys/fs/binfmt_misc may be the trap, because it is not just a matter of beeing mounted and rw, there's also some trouble with apparmor. E.g. on the machine # ls -lF /proc/sys/fs total 0 -rw-r--r-- 1 root root 0 Sep 10 18:36 aio-max-nr -r--r--r-- 1 root root 0 Sep 10 18:36 aio-nr drwxr-xr-x 2 root root 0 Sep 10 18:29 binfmt_misc/ -r--r--r-- 1 root root 0 Sep 10 18:36 dentry-state -rw-r--r-- 1 root root 0 Sep 10 18:36 dir-notify-enable dr-xr-xr-x 1 root root 0 Sep 10 18:36 epoll/ dr-xr-xr-x 1 root root 0 Sep 10 18:36 fanotify/ -rw-r--r-- 1 root root 0 Sep 10 18:30 file-max -r--r--r-- 1 root root 0 Sep 10 18:36 file-nr -r--r--r-- 1 root root 0 Sep 10 18:36 inode-nr -r--r--r-- 1 root root 0 Sep 10 18:36 inode-state dr-xr-xr-x 1 root root 0 Sep 10 18:36 inotify/ -rw-r--r-- 1 root root 0 Sep 10 18:36 lease-break-time -rw-r--r-- 1 root root 0 Sep 10 18:36 leases-enable -rw-r--r-- 1 root root 0 Sep 10 18:36 mount-max dr-xr-xr-x 1 root root 0 Sep 10 18:36 mqueue/ -rw-r--r-- 1 root root 0 Sep 10 18:30 nr_open -rw-r--r-- 1 root root 0 Sep 10 18:36 overflowgid -rw-r--r-- 1 root root 0 Sep 10 18:36 overflowuid -rw-r--r-- 1 root root 0 Sep 10 18:36 pipe-max-size -rw-r--r-- 1 root root 0 Sep 10 18:36 pipe-user-pages-hard -rw-r--r-- 1 root root 0 Sep 10 18:36 pipe-user-pages-soft -rw-r--r-- 1 root root 0 Sep 10 18:30 protected_fifos -rw-r--r-- 1 root root 0 Sep 10 18:30 protected_hardlinks -rw-r--r-- 1 root root 0 Sep 10 18:30 protected_regular -rw-r--r-- 1 root root 0 Sep 10 18:30 protected_symlinks dr-xr-xr-x 1 root root 0 Sep 10 18:36 quota/ -rw-r--r-- 1 root root 0 Sep 10 18:36 suid_dumpable dr-xr-xr-x 1 root root 0 Sep 10 18:36 verity/ shows binfmt_misc as readable, and I am root. But: # ls -lF /proc/sys/fs/binfmt_misc ls: cannot open directory '/proc/sys/fs/binfmt_misc': Permission denied -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2078597 Title: Failed to flush binfmt_misc rules, ignoring: Permission denied To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2078597/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
