tcpdump
tcpdump copied to clipboard
tcpdump apparmor denied open operation to /etc/pam_ldap.conf Ubuntu 22.04.3 LTS
When I use tcpdump, on Ubuntu 22.04 version, the default apparmor profile, that come with the tcpdump package, show a denied message to read /etc/pam_ldap_.conf
audit[2652907]: AVC apparmor="DENIED" operation="open" profile="tcpdump" name="/etc/pam_ldap.conf" pid=2652907 comm="tcpdump" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Why tcpdump wanted to read the ldap config of the pam?
It seems to be a question for Ubuntu support ...
Does using the -n flag solve the problem?
Closing due to lack of feedback.