3
votes
Excessive Firefox related AppArmor log entries
Additional rules have to be added to the Firefox Apparmor profile.
Edit /etc/apparmor.d/usr.bin.firefox and add:
# allow firefox to adjust its out of memory killer scroe
@{PROC}/[0-9]*/oom_score_adj ...
2
votes
audit: type=1400, apparmor='denied'
What should I do?
Nothing. This is standard behavior when a snapped (SANDBOXED!) toolkit runs and tries to access a function call it is not permitted to.
What you're seeing is that the Python AI ...
1
vote
How do I repair an ubuntu install with apparmor running forever at startup?
To fix this, I had to boot off the ubuntu installer USB image for 23.04, mount the file system the OS is installed on with sudo mount /dev/nvme0n1p2 /mnt, run chroot /mnt, edit /etc/resolv.conf to add ...
1
vote
Apparmor full system implementation help
you can start by creating profiles in complain mod for udevd and timesyncd this way you can log violations without actually enforcing.
first we create the profiles
sudo touch /etc/apparmor.d/lib-...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
apparmor × 327snap × 51
security × 33
permissions × 31
mysql × 31
firefox × 27
16.04 × 17
14.04 × 16
18.04 × 14
server × 14
22.04 × 14
boot × 13
20.04 × 13
kernel × 11
chromium × 9
evince × 9
networking × 8
ubuntu-touch × 8
selinux × 8
12.04 × 7
virtualization × 7
kvm-virtualization × 7
libreoffice × 6
docker × 6
guest-session × 6