Package: apparmor-profiles Version: 2.13.1-3 Followup-For: Bug #881460
I've created a patch to resolve this bug. After applying the patch you should link/copy the profile to /etc/apparmor.d, enforce the profile again (the kernel ring buffer will show a STATUS message) and restart NetworkManager.
--- /usr/share/apparmor/extra-profiles/sbin.dhclient 2019-01-05 01:06:40.237744708 +0100 +++ /usr/share/apparmor/extra-profiles/sbin.dhclient 2019-01-05 01:14:07.325115590 +0100 @@ -51,6 +51,7 @@ /usr/bin/vmstat mrix, /usr/bin/w mrix, /usr/lib/nm-dhcp-helper rix, + /usr/lib/NetworkManager/nm-dhcp-helper rix, /var/lib/dhcp/dhclient.leases rw, /var/lib/dhcp/dhclient-*.leases rw, /var/lib/dhcp6/dhclient.leases rw,
