| quidnunc | My samba stopped working after upgrading 23.10->24.04, it looks like the problem is apparmor. log says profile="samba-rpcd-classic" name="/usr/libexec/samba/samba-dcerpcd" denied_mask="x" | 00:01 |
|---|---|---|
| quidnunc | There doesn't appear to be an entry in the profile for samba-rpcd-classic for samba-dcerpcd. | 00:03 |
| quidnunc | Seems like a pretty severe bug unless I'm missing something? | 00:04 |
| Bashing-om | quidnunc: Are you affected: https://discourse.ubuntu.com/t/upcoming-apparmor-security-update-for-cve-2016-1585/44268 ? | 00:38 |
| -ubottu:#ubuntu-next- In all versions of AppArmor mount rules are accidentally widened when compiled. <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1585> | 00:38 | |
| quidnunc | Bashing-om: It doesn't look relevant (there are no mount rules in the profile in question), thanks though | 00:41 |
| quidnunc | How do I turn off apparmor? When I try to do "systemctl stop apparmor" I still get apparmor denied log messages in syslog | 00:41 |
| === guiverc2 is now known as guiverc | ||
| donofrio_ | indyZ, can you show me your in the pastebin? | 10:09 |
| donofrio_ | toddc, so I'm not the only one seeing this sources.list loooking odd? I have to say my cloud image is from three months ago but I've been dilligent to get the updates though dist-upgrade | 10:10 |
| lotuspsychje | donofrio_: some users were reporting scrambled sources on kubuntu 24.04 | 10:11 |
| lotuspsychje | but didnt see them on ubuntu-desktop broken | 10:12 |
| lotuspsychje | wich flavour are you testing donofrio_ ? | 10:12 |
| donofrio_ | cloud-image | 10:21 |
| donofrio_ | https://cloud-images.ubuntu.com/noble/current/noble-server-cloudimg-amd64.img | 10:22 |
| lotuspsychje | oh right, cant help with that | 10:26 |
| lotuspsychje | maybe the server guys can advice on that | 10:26 |
| donofrio_ | what "should" it look like can you paste.opensuse.org your /etc/apt/sources.list.d/ so I can try it and see if it works for the cloud image? | 10:38 |
| === Guest84 is now known as ghibourg | ||
| ghibourg | Hello, I am experiencing a weird DNS issue on Noble beta on 2 different machines. Some applications can properly resolve DNS (dig, resolvctl query, curl deb, getent, epiphany browser) but others can't (firefox snap, chromium snap, mattermost-desktop, element-desktop, konqueror deb, curl snap). I already discussed this issue with people on Matrix in | 20:23 |
| ghibourg | UbuntuSupport, but did not make much progress. It all worked fine yesterday. I upgraded packages on my laptop before finishing up yesterday, and today I am in this situation. I booted my desktop that was not updated recently, and have the same issue today. I have ruled out my home network by using my phone hotspot instead, and my desktop works fine | 20:23 |
| ghibourg | under Windows. I also ruled out routes and firewall, as I can connect directly to the IPs being returned through DNS. Also, all the apps that are failing can be seen making successful DNS queries through `resolvectl monitor`. Running `getent hosts` inside the environment of a snap like charmcraft also gives me this issue. If anyone has any ideas on | 20:23 |
| ghibourg | how to narrow this down further, it would be appreciated. | 20:23 |
| tomreyn | ghibourg: spooky. have you looked into packet dumps? maybe there's some fragmentation, bad router with low MSS or something. | 21:14 |
| tomreyn | ghibourg2: you, too | 21:14 |
| ghibourg | tomreyn I looked at some packet dumps, there is nothing obviously wrong there | 21:38 |
| JanC | so it's mostly containerized apps? | 21:40 |
| ghibourg | at this point, every snap I tested was failing, but some apps like konqueror also had the issue | 21:42 |
| ghibourg2 | It looks like a library issue somehow, or maybe some sandboxing, but I do not see apparmor denials in the logs when that happens | 21:45 |
| === guiverc2 is now known as guiverc | ||
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!