Questions tagged [apparmor]

AppArmor is a Linux Security Module

Filter by
Sorted by
Tagged with
1
vote
0answers
49 views

Python sees LD_LIBRARY_PATH only when executing as root (Ubuntu 20.04)

I am facing a tricky problem with LD_LIBRARY_PATH in python3.8 on Ubuntu 20.04.1. When I execute with my user the following lines: user@host>export LD_LIBRARY_PATH=/usr/lib user@host>echo $...
1
vote
2answers
206 views

How to uninstall snap?

I use Ubuntu for 12 years, and snap in the recent releases of Ubuntu is really disgrace. It creates lots of problems. After an upgrade, Chromium does not start with the error: chromium_chromium....
2
votes
0answers
61 views

AppArmor error Gnome Software Ubuntu 20.04

I'm very new to this stuff. I had a problem with snap-software so I purged it and installed gnome-software and I'm seeing the below error message. Sorry, something went wrong: An AppArmor policy ...
0
votes
0answers
17 views

How to reduce apparmor work during boot

What I found Checking dmesg I found, that during boot I have about 30 audit ... apparmor="STATUS" operation="profile_load" profile="unconfined" name="..." ... ...
0
votes
0answers
101 views

How to give permissions to a service?

I have a Ubuntu installation running Docker on a proxmox hypervisor. When I try to run docker-compose start, the containers fail with the following error: Cannot start service: AppArmor enabled on ...
1
vote
0answers
31 views

apparmor: how to allow emacs snap to redirect output to files on CLI?

I'm running Ubuntu 20.04.1 LTS and: $ which emacs /snap/bin//emacs $ emacs --version GNU Emacs 27.1 If I set up this file: mwe.el (defun output () (princ (apply #'concat (nthcdr 5 command-line-...
0
votes
0answers
16 views

Mysql error after apt upgrade error

I've recently run an apt upgrade on my server and then my MySQL server stopped working. Here is the error I get: AVC apparmor="DENIED" operation="create" profile="/usr/sbin/...
0
votes
1answer
89 views

How do I check Apparmor version? [duplicate]

How can I check the version of the installed Apparmor on a Linux system?
0
votes
0answers
76 views

How to completely disable apparmor for Firefox? (sanitized_helper etc…)

When I type: sudo aa-complain /etc/apparmor.d/usr.bin.firefox I was able to move these 2 profiles from [enforce] to [complain]: firefox firefox//lsb_release However, these 3 profiles remain as [...
0
votes
0answers
204 views

How to disable apparmor for Chromium snap? (Ubuntu 20.04)

When I type: sudo apparmor_status these 2 profiles are shown as enforce: snap.chromium.chromedriver snap.chromium.chromium When I type: sudo aa-complain /var/lib/snapd/apparmor/profiles/snap.chromium....
0
votes
0answers
56 views

SSSD with LDAP makes apparmor very noisy in syslog

When loging in with SSSD configured against LDAP, syslog becomes very noisy with apparmor messages. This is somewhat annoying when scanning the logs for valuable information. Maybe someone already ...
1
vote
0answers
67 views

Apparmor driving me nut

not way to make some snap running on my office machine (ubuntu 20.04 focal) I try for example to run drawio (from snap) with no success. what is strange is that on my home machine (ubuntu focal 20.04) ...
0
votes
0answers
70 views

Is apparmor interfering with canonical-livepatch?

I've been having odd/concerning notifications featuring apparmor for a few releases now, but after upgrading to 20.04 I see a bunch of this in /var/log/syslog: Jul 30 15:33:03 aaron-ubuntu ...
1
vote
0answers
49 views

MySQL Workbench apparmor error in Ubuntu 18.04 [duplicate]

When I try to launch MySQL Workbench I get the following AppArmor error When I run sudo aa-status I get below result 48 profiles are in enforce mode. : : : : snap-update-ns.mysql-...
0
votes
0answers
19 views

AppArmor Errors

I was trying to get help on Reddit for this but everyone seems to have disappeared. I was having issues with my computer running slow. I am using Kubuntu 20.4. I was asked to run “dmesg” and post the ...
1
vote
1answer
43 views

Who is the intended user for apparmor?

Ubuntu 18.04.2. I am not a technically trained person, pretty much just a regular layman who uses Ubuntu. I've been reading about apparmor, and struggling to understand its benefit. I understand that ...
1
vote
1answer
86 views

AppArmor, Ubuntu 20.04 Focal Fossa

Good day, I'm currently a newbie at Linux. I've been doing well as I have managed to find most of the commands I have needed so far on google.I found a link on google that said to start you first need ...
0
votes
1answer
46 views

apparmor profile for pdns-recursor blocks to start the pdns-recursor service on systemd

When I generate the apparmor profile with aa-genprof for /usr/sbin/pdns_recursor everything seems to be OK. But apparmor blocks the service startup even in complain mode. I have launched a brand new ...
0
votes
0answers
112 views

Why is my dmesg log full of apparmor messages about snapd-confine

Ubuntu 18.04.4 LTS I've been ignoring this for months because it's just an annoyance, but does anyone know of an easy way to stop these messages from flooding my dmesg? audit: type=1400 audit(...
0
votes
0answers
22 views

I print only to file, yet I get cups errors. How do I stop these denied_mask=“send connect” messages?

1 Time(s): audit: type=1400 audit(1592542742.490:6907): apparmor="DENIED" operation="connect" profile="/usr/sbin/cupsd" pid=27801 comm="cupsd" family="unix&...
0
votes
1answer
661 views

Ubuntu 20.04 MySQL Datadir Permissions (Errno 13)

askubuntu.com, I need some help debugging my MySQL setup! For the past couple years, I have been hosting my local development resources on Dropbox, and it's been working wonderfully. This past week, I ...
0
votes
0answers
92 views

Snap , app armor and gimp plugins

I installed gimp 2.10 using snap in Ubuntu 16.04 32-bit and want extract/move plugins to required directory: /home/velukutty/snap/gimp/253/.config/GIMP/2.10/plug-ins But unable to do so due to ...
1
vote
1answer
222 views

docker-compose denied by AppArmor outside of $HOME - how to fix?

I'm trying to run docker-compose up from /data/myproject but it fails: /data/myproject# docker-compose up ERROR: Can't find a suitable configuration file in this directory or any ...
2
votes
0answers
61 views

Software center doesn't have any proper icons and outputs a lot of errors when going into the update section

I'm a complete newbie that installed Ubuntu a couple of days ago and ran into some issues. The software center looks like this: And when I enter the updates section, the following errors are ...
0
votes
0answers
84 views

“apparmor_parser”: executable file not found in $PATH

why does snap keeps preventing installing applications with the error stating that executable file not found in $PATH despite adding the required path variable in the bashrc profile? I am attaching ...
0
votes
0answers
130 views

Understanding AppArmor log messages

I'm trying to understand different log messages in /var/log/kern.log that started appearing a few days ago. I'm new to AppArmor, I've read man pages and I understand the concepts, I've searched on the ...
0
votes
0answers
55 views

Problem using PulseAudio in a snap program

It appears that apparmor is preventing Gnu Octave from connecting to the Pulse audio pipe. How can I remove this restriction. dmesg output [10986.689501] audit: type=1400 audit(1590956219.198:4342): ...
0
votes
0answers
43 views

Ubuntu 19.10 is not starting, [FAILED] messages on boot

I was using Firefox and terminal; there I was converting a python file to APK with buildozer after I found that .sh files are not available so I ran several commands and my laptop hung. I was not able ...
0
votes
0answers
51 views

Apparmor is missing profile for LightDM. It renders aa-tools useless

I have tried to create a profile using sudo aa-grenprof and it has suddenly stopped working. It did not even show error message and I cannot find usefull information in the logs(syslog and auth.log). ...
1
vote
0answers
74 views

How can I reinstall mysql after deleting it?

I have been having lots of issues with MySQL. In hindsight I have a feeling it has something to do with App Armor. But now when I run sudo apt-get install mysql-server I end up getting errors. Is this ...
1
vote
0answers
68 views

AppArmor is blocking vital functionality fof half of my installed snaps; how do I fix this issue?

I'm running a fresh install of Kubuntu 20.04. In 19.10, I rather enjoyed using snap packages. They're complete and functional. But, I'm running into all sorts of issues. My dmesg output is crammed ...
1
vote
1answer
495 views

How to get the sc-controller to function on 20.04

Apparmor will deny the snap or appimage of sc-controller access to uinput resulting in sc-controller displaying error 1. A deb for 20.04 is not available and the source would require python 2.7. From ...
2
votes
0answers
755 views

Unable to disable apparmor in Ubuntu 20.04 LTS

I tried to open a pdf in my external HD with Evince (pdf reader), but apparmor denied. Then I tried to find Evince's profile to add a link to it in /etc/apparmor.d/disable in order to disable the ...
1
vote
0answers
131 views

Snap with NFS Shares

Just switched to Ubuntu and am having issues accessing files stored on my NFS share when I use GIMP, VLC, and Audacity. All other software works great with my NFS shares. After spending a day ...
1
vote
1answer
230 views

Telegram's problem with persian font

I've installed Telegram on my Ubuntu 18.04. My system is updated and everything is updated. When I try to open telegram, for Persian texts, it uses a very weird monospace like font. I've tried ...
2
votes
2answers
538 views

No sound with Chromium on Ubuntu 19.10

Pulseaudio is running in daemon mode and I am able to play sound through aplay, vlc, etc, so I know sound is working. The output of dmesg when chromium is running indicates that apparmor is blocking ...
0
votes
2answers
160 views

Unable to launch evince

When launching evince, I get this error: EvinceDocument-WARNING **: 10:14:16.337: Error opening directory “/usr/lib/x86_64-linux-gnu/evince/4/backends”: Permission denied I have already put evince ...
1
vote
1answer
435 views

Libreoffice crashes immediately on startup

I am on Ubuntu 19.10, with Libreoffice 6.3.4, and OpenJDK 14 and am unable to launch libreoffice: libreoffice: Fatal exception: Signal 11 Stack: /usr/lib/libreoffice/program/libuno_sal.so.3(+0x3d263)...
0
votes
0answers
279 views

apparmor.service fails with apt install (status=1/FAILURE), Ubuntu 18.04

I've searched far and wide on the Internet, and this problem looks decidedly different than the "apparmor fails status=123" issues I've seen. Basically, whenever I try to run anything with apt (apt ...
1
vote
0answers
431 views

Snaps won't run due to AppArmor Error

I had an issue with BlueMail all of sudden refusing to launch and I determined that AppArmor was at fault (it was denying BlueMail access to my Downloads folder on another drive). When I was not able ...
0
votes
0answers
130 views

I can't launch WhatsDesk — apparmor DENIED - how do I troubleshoot this?

I installed WhatsDesk via the Software Center. I believe it worked before but I haven't tried to use it in ages, and it isn't working now. Whether I click "Launch" from the Software Center or search ...
0
votes
0answers
42 views

Editing AppArmor newly created profile

I've created an AppArmor profile for vim cat /etc/apparmor.d/usr.bin.vim.basic #include <tunables/global> /usr/bin/vim.basic { #include <abstractions/base> #include <abstractions/...
1
vote
0answers
157 views

mysqld won't start, apparmor blocked some file?

I'm using ubuntu 19.10,and when I installed mariadb, it is fine but when I restart the computer it started got some error. I track down the error seems like apparmor blocked it from reading some file. ...
0
votes
1answer
80 views

Apparmor problem with ecryptfs mount on mysql folder

I am getting mysql to run on a ecryptfs filesystem in a standard LAMP stack running in DigitalOcean Ubuntu 18.04.2 for a Wordpress website. It is running well with the process below, except that ...
0
votes
0answers
137 views

How to block all outgoing traffic on network except process

I want to block all outgoing network except process. How can i do that ? The ufw doesn't provide process base rules. Iptables allow some rules about gid-owner ... but not process. for example can ...
1
vote
1answer
642 views

Discord snap package spams journal

Journalctl shows that the Discord snap package / apparmor prints many messages to the systemd journal. Is there a way to fix this problem? The problem seems to have been happening for some time. I've ...
3
votes
0answers
298 views

Apparmor blocks freshclam

Apparmor blocks freshclam. audit: type=1400 audit(1574688195.159:67): apparmor="DENIED" operation="open" profile="/usr/bin/freshclam" name="/etc/ssl/openssl.cnf" pid=7119 comm="freshclam" ...
0
votes
2answers
2k views

MariaDB fails despite apparmor profile

Starting MariaDB fails on my Ubuntu 19 installation after this: nov 02 16:40:51 farnsworth systemd[1]: Starting MariaDB 10.3.17 database server... nov 02 16:40:51 farnsworth mysqld[5328]: 2019-11-02 ...
1
vote
0answers
365 views

Can be deleted - Identifying what causes the boot process to hang on 'A start job is running for apparmor initalization'

I am using a laptop with dual boot (Ubuntu 18.04.3LTS and WIN). It has has an i3-5010U chip with Intel HD5500 graphics. Since I use Ubuntu both for normal desktop use and for audio (Cadence, Catia, ...
1
vote
0answers
274 views

livepatch apparmor=“DENIED”?

I've just installed canonical-livepatch on Ubuntu Server 16.04.6 LTS and when I try to register the machine I get this on the enable command: 2019/10/20 11:33:55 error executing enable: cannot enable ...

1
2 3 4 5 6