tcpdump icon indicating copy to clipboard operation
tcpdump copied to clipboard

tcpdump apparmor denied open operation to /etc/pam_ldap.conf Ubuntu 22.04.3 LTS

Open spinter98 opened this issue 1 year ago • 2 comments

When I use tcpdump, on Ubuntu 22.04 version, the default apparmor profile, that come with the tcpdump package, show a denied message to read /etc/pam_ldap_.conf

audit[2652907]: AVC apparmor="DENIED" operation="open" profile="tcpdump" name="/etc/pam_ldap.conf" pid=2652907 comm="tcpdump" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Why tcpdump wanted to read the ldap config of the pam?

spinter98 avatar Feb 28 '24 08:02 spinter98

It seems to be a question for Ubuntu support ...

fxlb avatar Feb 28 '24 08:02 fxlb

Does using the -n flag solve the problem?

infrastation avatar Mar 29 '24 14:03 infrastation

Closing due to lack of feedback.

infrastation avatar Jul 23 '24 15:07 infrastation