[50413.731914] audit: type=1400 audit(1649961693.894:53): apparmor="DENIED" operation="unlink" profile="/usr/lib/ipsec/charon" name="/etc/resolv.conf" pid=1856 comm="charon" requested_mask="d" denied_mask="d" fsuid=0 ouid=0
[50413.731932] audit: type=1400 audit(1649961693.894:54): apparmor="DENIED" operation="open" profile="/usr/lib/ipsec/charon" name="/etc/resolv.conf" pid=1856 comm="charon" requested_mask="wc" denied_mask="wc" fsuid=0 ouid=0