OPENVPN connection issue - apparmor="DENIED" operation

Installing and Using OpenWrt
1

Hi,

I've been trying to connect VPN as a client for a while now

Docker/Syn720+
OpenWrt SNAPSHOT r18285-dd681838d3 / LuCI Master git-21.336.35676-ff4f529

I get the error message

Mon Dec  6 11:16:08 2021 kern.info kernel: [2405195.805821] Synotify use 16384 event queue size
Mon Dec  6 11:16:08 2021 daemon.err openvpn(test)[1340]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:08 2021 daemon.warn openvpn(test)[1340]: Use --help for more information.
Mon Dec  6 11:16:08 2021 kern.notice kernel: [2405196.306197] audit: type=1400 audit(1638789368.802:590201): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16189 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Mon Dec  6 11:16:13 2021 daemon.err openvpn(test)[1347]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:13 2021 daemon.warn openvpn(test)[1347]: Use --help for more information.
Mon Dec  6 11:16:13 2021 kern.notice kernel: [2405201.332861] audit: type=1400 audit(1638789373.830:590202): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16246 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Mon Dec  6 11:16:18 2021 daemon.err openvpn(test)[1350]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:18 2021 daemon.warn openvpn(test)[1350]: Use --help for more information.
Mon Dec  6 11:16:18 2021 kern.notice kernel: [2405206.361522] audit: type=1400 audit(1638789378.860:590203): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16359 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Mon Dec  6 11:16:23 2021 kern.notice kernel: [2405211.390690] audit: type=1400 audit(1638789383.893:590204): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16493 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Mon Dec  6 11:16:23 2021 daemon.err openvpn(test)[1353]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:23 2021 daemon.warn openvpn(test)[1353]: Use --help for more information.
Mon Dec  6 11:16:24 2021 daemon.info procd: Instance sysntpd::instance1 s in a crash loop 6 crashes, 0 seconds since last crash
Mon Dec  6 11:16:28 2021 daemon.err openvpn(test)[1356]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:28 2021 daemon.warn openvpn(test)[1356]: Use --help for more information.
Mon Dec  6 11:16:28 2021 kern.notice kernel: [2405216.416908] audit: type=1400 audit(1638789388.921:590205): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16539 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Mon Dec  6 11:16:33 2021 daemon.err openvpn(test)[1434]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:33 2021 daemon.warn openvpn(test)[1434]: Use --help for more information.
Mon Dec  6 11:16:33 2021 kern.notice kernel: [2405220.835815] audit: type=1400 audit(1638789393.342:590206): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16724 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Mon Dec  6 11:16:38 2021 daemon.err openvpn(test)[1493]: Options error: In [CMD-LINE]:1: Error opening configuration file: /etc/openvpn/test.ovpn
Mon Dec  6 11:16:38 2021 daemon.warn openvpn(test)[1493]: Use --help for more information.
Mon Dec  6 11:16:38 2021 kern.notice kernel: [2405225.864697] audit: type=1400 audit(1638789398.372:590207): apparmor="DENIED" operation="open" profile="/usr/sbin/openvpn" name="/etc/openvpn/test.ovpn" pid=16859 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Exactly the same OpenVPN configuration that I'm using on an RPI with no issues
/etc/config /etc/openvpn

Unfortunately, I'm not very familiar with the area yet

What could be the reason?

Thx for help

2

Do you have AppArmor installed on OpenWrt?

3

Not that I know of
It is the version https://registry.hub.docker.com/r/openwrtorg/rootfs/
I didn't install it separately,
under software
I'm able to install
libapparmor and python3-apparmor

Installed
No packages matching "armor". ([Reset])

4

Looks like the issue is unrelated to OpenWrt.
Follow to the support channel for your host system.
This is likely where AppArmor denials are coming from.

5

So it's more a synology DSM7 or Docker thing?

mmiii

1 Like