I am not sure how to check in Ubuntu, but have you verified that SELinux is allowing it? On RHEL/Fedora/CentOS you can run getenforce to find out what mode it is running, and you can use sealert (once ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results