Re: regression in 4.14-rc2 caused by apparmor: add base infastructure for socket mediation

From: John Johansen
Date: Tue Oct 03 2017 - 00:12:12 EST

On 10/02/2017 09:02 PM, James Bottomley wrote:
> The specific problem is that dnsmasq refuses to start on openSUSE Leap
> 42.2. ÂThe specific cause is that and attempt to open a PF_LOCAL socket
> gets EACCES. ÂThis means that networking doesn't function on a system
> with a 4.14-rc2 system.
> Reverting commitÂ651e28c5537abb39076d3949fb7618536f1d242e (apparmor:
> add base infastructure for socket mediation) causes the system to
> function again.

This is not a kernel regression, it is because opensuse dnsmasque is
starting with policy that doesn't allow access to PF_LOCAL socket

Christian Boltz the opensuse apparmor maintainer has been working
on a policy update for opensuse see bug