The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [apparmor]

AppArmor is a Linux Security Module

Filter by
Sorted by
Tagged with
0
votes
0answers
20 views

Sofware Updater freezes: “Configuring snapd”

I am running a fresh install of Ubuntu Linux 19.04 Disco Dingo, and when I try to bring the system up-to-date through Software Updater, the whole process freezes at Configuring snapd. Please find two ...
1
vote
0answers
20 views

Apparmor enforce mode prevents Firefox from reading U2F security key

When the default apparmor profile for Firefox is set to enforce mode, it blocks Firefox access to security keys. Disabling the profile restores access. Rules that I've tried and failed: /sys/devices/...
1
vote
0answers
86 views

/sys/kernel/security/apparmor/profiles set to -r--r--r— but not readable by non-root user

I've tried to upgrade from gnome-boxes 3.28 to 3.32 but it keeps crashing because libvirtd is not able to access: /sys/kernel/security/apparmor/profiles This is the terminal output: user1@pts:~: ...
0
votes
1answer
29 views

With Firefox ESR installed AppArmor failed to start with “Could not open 'abstractions/ubuntu-browsers.d/firefox'” - how to fix?

On my Ubuntu 16.04.5 LTS system I have installed Firefox ESR 52.9.0 to have some Legacy Addons working on it. It was installed from JonathonF PPA and then pinned: $ apt-cache policy firefox-esr ...
1
vote
1answer
44 views

Help! zlib-1.2.9 - Killed AppArmor and all network connectivity, cannot fix

So I was installing Flexihub (https://www.flexihub.com/download.html) and I had an error noting that the package "zlib-1.2.9" was unavailable, so I tracked it down from proper sources, installed it, ...
0
votes
1answer
49 views

Apparmor deny create operation

I have a problem with IPSec. After debugging, I found this message in dmesg: apparmor=“DENIED” operation=“create” profile=“/usr/lib/ipsec/charon” ..... requested_mask=“create” denied_mask=“create” I ...
0
votes
1answer
37 views

AppArmor profile enforced for different users

Is there a native way to enforce AppArmor profiles on a user basis. Enforcing two profiles for one program for different user groups. For user 1 example.sh permits xyz and denies abc. For user 2 ...
0
votes
0answers
24 views

AppArmor automatic profiles

I tried using aa-genprof to create a profile of the Splunk daemon. I started, stopped, and restarted Splunk. I downloaded and installed apps from the Splunkbase. I enabled inputs that open network ...
0
votes
1answer
115 views

Apparmor permission for libvirt-qemu

I am trying to run custom build qemu with libvirt. However, every time it fails due to apparmor permission. dmesg shows that: [ 82.818348] audit: type=1400 audit(1563507497.685:181): apparmor="...
1
vote
0answers
83 views

dmesg is showing apparmor=“DENIED”

I'm following a set of instructions and to validate I need to type the following command: dmesg | grep IOMMU Nothing appears. But then I tried just dmesg and it only shows a lot of the following ...
0
votes
0answers
21 views

How to display the security context associated with files or directories under Apparmor in Ubuntu

In Fedora the security context can be known using 'ls -Z ' command. I want know, how the security context can be known in Ubuntu using Apparmor.
1
vote
0answers
130 views

Brave web browser not starting, apparmor profile to complain

usu@U02:~$ sudo aa-complain /var/lib/snapd/apparmor/profiles/snap.brave.brave Profile for /var/lib/snapd/apparmor/profiles/snap.brave.brave not found, skipping usu@U02:~$ usu@U02:~$ sudo aa-complain ...
0
votes
0answers
42 views

Apparmor, interactive authentication required

Apparmor has been removed and reinstalled, but if fails to load module. Restarting apparmor (via systemctl): apparmor.serviceFailed to restart apparmor.service: Interactive authentication required. ...
2
votes
0answers
27 views

I keep seeing “Failed to start AppArmor”

Since a few days ago whenever I try to turn on my computer, I see: Using systemctl status apparmor.service I get: ● apparmor.service - AppArmor initialization Loaded: loaded (/lib/systemd/system/...
1
vote
0answers
44 views

AppArmor - failed to start [duplicate]

On my Ubuntu server 18.04 I have next error: sudo service apparmor status ● apparmor.service - AppArmor initialization Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: ...
0
votes
0answers
63 views

Where and how to place local modification of GIMP apparmor profile

Ubuntu 18.04 Desktop GIMP snap installed (graphic images manipulation) AppArmor in use as installed then configured by Canonical All them in virtual machine hypervisored by VmWare Host machine ...
0
votes
1answer
64 views

Every time Libvirt VM is started, AppArmor profile for it gets removed

When I create Libvirt virtual machine with virsh create /etc/apparmor.d/libvirt/libvirt-142341234-234123-4124-123-4234 and /etc/apparmor.d/libvirt/libvirt-142341234-234123-4124-123-4234.files gets ...
0
votes
1answer
1k views

How to disable AppArmor for MySQL

I have followed the instructions here to set up a Galera cluster. The instruction says I need to disable appArmor: Disabling AppArmor By default, some servers—for instance, Ubuntu—include ...
1
vote
1answer
3k views

Can't install snapd on Ubuntu 18.04.2 LTS

snapd on my machine is not working and I tried reinstalling using sudo apt install --reinstall snapd I got the below error. Unpacking snapd (2.38+18.04) over (2.38+18.04) ... Processing triggers for ...
1
vote
1answer
397 views

Switched from snap Docker to .deb, can't stop my containers

I can start Docker containers just fine, but when I try to stop or kill them, I get an error: $ docker kill upbeat_shannon Error response from daemon: Cannot kill container: upbeat_shannon: Cannot ...
0
votes
0answers
94 views

apparmor logging level - skip audit log

How do I minimize apparmor logging? Libreoffice is generating a large number of apparmor audit log statements. I want to know about access denials but don't want to see all these approvals in my ...
0
votes
0answers
90 views

Use AppArmor to restrict access to a file even by a root

How can I use AppArmor to restrict access to a file/dir by all users even users with root privileges? Also, can I grant the right to access the file to only one user but without his group?
2
votes
0answers
298 views

How can I configure apparmor to allow mariadb load a shared library?

After a routine update yesterday, MariaDB would not start because a shared library file is not loading because it is being blocked by apparmor. Here's the output from the journalctl -xe Apr 17 11:44:...
0
votes
0answers
62 views

AppArmor to add restrictions to execute a process

I have a daemon process which is started by another process. My requirement is, I want only a couple of processes to allow to execute this process. Example: Say the daemon process is : X Root user ...
0
votes
1answer
39 views

MySQL not starting and preventing os from booting to gui

Am using Ubuntu 18.10 which is running MySQL community latest, after os update and restart, it refuses to boot to gui. I can access the root account via recovery and I have tried a lot of solutions ...
0
votes
0answers
135 views

18.10 snap APPARMOR - APPARMOR denying snap spotify access to mounted external drive

I'm trying to move my spotify storage to an external drive but the browse dialog raised by the settings pane cannot access the mount directory. Journal has this message: AVC apparmor="DENIED" ...
0
votes
1answer
67 views

snap/kodi:apparmor blocks dvd [duplicate]

Would be nice to use dvd in the kodi-snap in the cosmic's software-center, but it somehow seems to be blocked by apparmor: audit[10035]: AVC apparmor="DENIED" operation="open" profile="snap.kodi.kodi"...
0
votes
1answer
155 views

Enforce: Command Not Found - Ubuntu 18.04

When I tried to run the code below: enforce /etc/apparmor.d/* It says: enforce: command not found Even if I already successfully installed apparmor-utils using the code below: sudo apt-get ...
3
votes
1answer
949 views

How can I safely remove snap without breaking apparmor

I'd like to remove Snap from my system entirely, but have a smallish problem: 1st, I removed all snap packages: sudo snap remove $(snap list | tail -n +2 | cut -d" " -f1 | grep -v core | tr "/n" " ")...
0
votes
1answer
322 views

What are possible causes of appmenu-gtk failing to connect to D-Bus?

The warning is ** (/usr/lib/firefox/firefox:1671): WARNING **: 22:14:54.614: Unable to connect to dbus: Could not connect: Permission denied I tried using strace but can't find any related file ...
0
votes
0answers
58 views

/var/log/kern.log apparmor entries

Ubuntu 18.04.1. In /var/log/kern.log, I see MANY entries like this, all having to do with Firefox: Jan 14 06:19:20 system1 kernel: [ 630.158381] audit: type=1400 audit(1547468360.615:90): ...
0
votes
0answers
138 views

Apparmor Installed Automatically (18.04)

In the latest apt upgrade I performed, apparmor was reinstalled. EDIT: Seems it doesn't install with apt-get, only with apt. How can I make sure this doesn't happen?
1
vote
0answers
1k views

LXD, apparmor=“DENIED” operation=“mount” info=“failed flags match”

How can I solve this apparmor issue? This apparmor message appears every 30 minutes in my log. dmesg output: ... [5535381.853068] audit: type=1400 audit(1546688340.298:866): apparmor="DENIED" ...
0
votes
1answer
84 views

AppArmor kills apache2 when in aa-complain mode, why is there a mysqld.sock failure?

I'm running Ubuntu 18.04.1 LTS I'm trying to create an apache2 profile in AppArmor but when I run aa-genprof and try to hit my Drupal website to scan in processes for the profile my website breaks ...
0
votes
1answer
229 views

AppArmor genprof problem for apache2 on Ubuntu 18

I am unable to create a proper AppArmor profile for apache2 on Ubuntu 18. When I follow these steps, I am unable to scan and build a profile for apache2 because my website fails during the genprof ...
10
votes
3answers
854 views

Brave browser not starting due to snap mount namespace error

Brave installed from snap was running perfectly fine for months. Since two days it is not starting when clicking Brave icon from launcher. When attempting to run Brave from command line just calling ...
1
vote
0answers
473 views

Why does Apparmor fail after I install MySQL on 18.04.1 LTS?

I have a test web server that I'm trying to add MySQL to then further mumps. After installation of MySQL AppArmor(aa) has a parser failure and has an exit-code 123. I have purged the MySQL ...
1
vote
0answers
232 views

GitKraken access to /disk2/ missing [duplicate]

I've installed GitKraken from Snap. When I try to open a repository from my second disk, I see no /disk2/ directory in the list of directories under /. I suspect this is caused by application ...
0
votes
1answer
100 views

Apparmor profile for Chromium browser to read from VirtualBox shared folder

Were there any changes in apparmore profile for Chriomium browser since 16.04 LTS? Ubuntu 17.x was skipped. We ran 16.04, now B.Beaver. With transition to Beaver Chriomium stopped to be able to ...
1
vote
1answer
221 views

Bad system call (core dumped) /usr/share/man/man1

I am running on Ubuntu 18.04.1 release 4.15.0-38-generic. I know this or a similar question was asked a few months ago and there seemed to be a fix or a workaround in progress. dpkg --list man-...
0
votes
1answer
132 views

Evince - Libreoffice - Geogebra - Apparmor issues

I try to authorize evince to open Geogebra and libreoffice files as links. Using evince 3.18.2 on ubuntu 16.04. Update 1: I've just installed a fresh 18.04 with the same problem. Update 2: Here are ...
0
votes
0answers
157 views

is there a listing of the docker-default apparmor profile available?

I need to customize the apparmor profile used by docker but cannot find the source anywhere. I even tried bing! There may be a good reason it's obscured, but I'm hoping someone on here can point me ...
2
votes
2answers
3k views

Can't change data directory of mysql (Errcode: 13 - Permission denied) [duplicate]

I have changed the data directory of mysql. For that I moved the folder /var/lib/mysql to a newDirectory changed the datadir in /etc/mysql/mysql.conf.d/mysqld.cnf, changed the apparmor config in /...
1
vote
1answer
3k views

AppArmor parser error for mysqld

I have tried to change the MySQL Data Directory to a New Location. Therefore I have changed the MySQL configuration file /etc/mysql/mysql.conf.d/mysqld.cnf and the apparmor file /etc/apparmor.d/...
0
votes
0answers
171 views

LibreOffice AppArmor messages issue

I use Ubuntu Studio 18.04.1 LTS, installed from the scratch, with a DVD made with the ISO image directly from the website. I installed LibreOffice 6.0.6.2, also from the correspondent official ...
1
vote
0answers
22 views

How Do I Properly Install Selinux on Ubuntu? [duplicate]

In the past I have used Fedora and loved having Selinux and learning about it etc. I'm pretty familiar with it. But I had a soft spot in my heart and went back to Ubuntu due to it being the first ...
1
vote
1answer
223 views

Apparmor denies access to my public key

I can't fetch any repositories due to apparmor denies access to my public key located in my home folder. How can i enable access to this file? Logs: Jul 18 08:55:01 PC-NAME kernel: [33629.897509] ...
0
votes
0answers
740 views

Brave Browser (Snap) won't launch - possibly AppArmor related

Installed Brave (snap) via Software Centre on Ubuntu 18.04. It seems to install correctly. When I click on launch nothing happens but the log is full of multiple apparmor messages. I've attached the ...
2
votes
1answer
546 views

libvirt/kvm guest failing due issues in the ApparmorProfile

Why is my guest failing to start / failing to attach a device with this apparmor profile error. Start: error: Failed to start domain c error: internal error: cannot load AppArmor profile 'libvirt-...
5
votes
0answers
761 views

LibreOffice can't access /tmp files in 18.04

Just installed LibreOffice 6.0.4.2 in Ubuntu 18.04. LibreOffice can't open (nor list) files from /tmp directory. I've read about AppArmor profiles, devs talking about the "expected" /home use case, ...