Public bug reported:
running
sudo wg-quick up wg0
produces
stat: cannot read table of mounted file systems: Permission denied
stat: cannot read table of mounted file systems: Permission denied
/usr/bin/wg-quick: line 47: ((: ( & & 0007) == 0: syntax error: operand
expected (error token is "& & 0007) == 0")
Warning: `/etc/wireguard/wg0.conf' is world accessible
The VPN starts but these errors/warnings are new for 25.10.
Syslog says:
2025-10-14T13:24:58.247604+01:00 polaris kernel: audit: type=1400
audit(1760444698.245:7785): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66193/mountinfo" pid=66193 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.247633+01:00 polaris kernel: audit: type=1400
audit(1760444698.245:7786): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66193/mounts" pid=66193 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.254586+01:00 polaris kernel: audit: type=1400
audit(1760444698.252:7787): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66194/mountinfo" pid=66194 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.254598+01:00 polaris kernel: audit: type=1400
audit(1760444698.252:7788): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66194/mounts" pid=66194 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.285489+01:00 polaris NetworkManager[1133]: <info>
[1760444698.2851] manager: (wg0): new WireGuard device
(/org/freedesktop/NetworkManager/Devices/29)
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Tags: questing
** Description changed:
- runing
- ```
+ running
+
+
sudo wg-quick up wg0
- ```
+
produces
- ```
+
stat: cannot read table of mounted file systems: Permission denied
stat: cannot read table of mounted file systems: Permission denied
/usr/bin/wg-quick: line 47: ((: ( & & 0007) == 0: syntax error: operand
expected (error token is "& & 0007) == 0")
Warning: `/etc/wireguard/wg0.conf' is world accessible
- ```
+
The VPN starts but these errors/warnings are new for 25.10.
Syslog says:
- ```
2025-10-14T13:24:58.247604+01:00 polaris kernel: audit: type=1400
audit(1760444698.245:7785): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66193/mountinfo" pid=66193 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.247633+01:00 polaris kernel: audit: type=1400
audit(1760444698.245:7786): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66193/mounts" pid=66193 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.254586+01:00 polaris kernel: audit: type=1400
audit(1760444698.252:7787): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66194/mountinfo" pid=66194 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.254598+01:00 polaris kernel: audit: type=1400
audit(1760444698.252:7788): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66194/mounts" pid=66194 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.285489+01:00 polaris NetworkManager[1133]: <info>
[1760444698.2851] manager: (wg0): new WireGuard device
(/org/freedesktop/NetworkManager/Devices/29)
- ```
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2127851
Title:
wireguard's wg-quick produces errors when bringing up/down vpn
Status in apparmor package in Ubuntu:
New
Bug description:
running
sudo wg-quick up wg0
produces
stat: cannot read table of mounted file systems: Permission denied
stat: cannot read table of mounted file systems: Permission denied
/usr/bin/wg-quick: line 47: ((: ( & & 0007) == 0: syntax error: operand
expected (error token is "& & 0007) == 0")
Warning: `/etc/wireguard/wg0.conf' is world accessible
The VPN starts but these errors/warnings are new for 25.10.
Syslog says:
2025-10-14T13:24:58.247604+01:00 polaris kernel: audit: type=1400
audit(1760444698.245:7785): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66193/mountinfo" pid=66193 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.247633+01:00 polaris kernel: audit: type=1400
audit(1760444698.245:7786): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66193/mounts" pid=66193 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.254586+01:00 polaris kernel: audit: type=1400
audit(1760444698.252:7787): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66194/mountinfo" pid=66194 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.254598+01:00 polaris kernel: audit: type=1400
audit(1760444698.252:7788): apparmor="DENIED" operation="open" class="file"
profile="wg-quick" name="/proc/66194/mounts" pid=66194 comm="stat"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2025-10-14T13:24:58.285489+01:00 polaris NetworkManager[1133]: <info>
[1760444698.2851] manager: (wg0): new WireGuard device
(/org/freedesktop/NetworkManager/Devices/29)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2127851/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
