Skip to content

flood in logs: apparmor="DENIED" /run/azuremonitoragent/default_syslog.socket #2135

@YuraQlog

Description

@YuraQlog

VM, created from predefined by Azure image ubuntu 22.04 and lately upgraded to 24.04

lsb_release -a
...
Description: Ubuntu 24.04.3 LTS

uname -a
Linux vm-name 6.14.0-1012-azure #12~24.04.1-Ubuntu SMP

$ sudo apt list --installed | grep azuremonitor
azuremonitoragent/now 1.25.1-build.master.51 amd64 [installed,local]

Great project, but there is big problem:
flood (exhausting disk space) in /var/log/kern.log
audit: type=1400 audit(1763856064.243:160348020): apparmor="DENIED" operation="sendmsg" class="file" profile="rsyslogd" name="/run/azuremonitoragent/default_syslog.socket" pid=2500636 comm=72733A6D61696E20513A526567 requested_mask="w" denied_mask="w" fsuid=104 ouid=104

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions