http://bugzilla.opensuse.org/show_bug.cgi?id=1083980 Bug ID: 1083980 Summary: Please add 'attach_disconnected' to the bin.ping profile Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: markos.chandras@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- In some of our tests we use overlayfs to create containers based on a common image. However, trying to use the 'ping' utility results to the following problem [ 773.853958] audit: type=1400 audit(1520265543.357:202): apparmor="DENIED" operation="getattr" info="Failed name lookup - disconnected path" error=-13 profile="/{usr/,}bin/ping" name="@/.snapshots/1/snapshot/var/lib/lxc/opensuse-42.3-amd64/rootfs/etc/ld.so.cache" pid=9372 comm="ping" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 would it be possible to add the 'attach_disconnected' flag to the ping profile in a similar fashion to the following upstream patch? https://lists.ubuntu.com/archives/apparmor/2015-May/007848.html Thank you -- You are receiving this mail because: You are on the CC list for the bug.