Questions tagged [apparmor]

AppArmor is a Linux Security Module

Filter by
Sorted by
Tagged with
0 votes
0 answers
17 views

New to apparmor- why are all downloaded appoarmor prifiles blanc?

background: I'm on Ubuntu 20.04.03 LTS and looking for "how to make my next installation more secure". I am interested in a topic that often relies on third party- and maybe older/not well ...
Danny27's user avatar
  • 63
0 votes
1 answer
26 views

How to fix Foliate 3 unable to open any epub file after recent update?

After the recent update, the Foliate ebook reader cannot open ebooks anymore (in both APT and Snap versions). This issue seems to occur in Ubuntu 22.04 with snap, as well as in Ubuntu 24.04 (daily ...
Archisman Panigrahi's user avatar
0 votes
0 answers
57 views

snap causes the shell to freeze upon login

Since the past 2~3 days I'm experiencing a bad slowdown when I login in 22.04.4. I have HWE enabled and using Nvidia 550.54.14 (latest Stable binaries - installed via Proprietary GPU Drivers ppa) The ...
Emanuele's user avatar
  • 636
0 votes
1 answer
87 views

How can I parse apparmor profile?

I want to see the restrictions of apparmor for dhclient for example I tried to run apparmor_parser -p /sys/kernel/security/apparmor/policy/profiles/usr.sbin.dhclient.6/raw_data I got : AppArmor ...
vtable's user avatar
  • 103
0 votes
2 answers
61 views

apparmor bind interaction, preventing jnl file updates

Ubuntu 22.04.4 LTS Bind 9.18.18 I have placed by named zones files in /etc/bind/zones, but I have made the machine a secondary for dynamic DNS, it is a primary for static zones, though in actuality ...
Brian Cuttler's user avatar
0 votes
0 answers
21 views

Ubuntu 20.04 snaps: Allow a snap app access to a VM shared folder

I have Ubuntu 20.04 guest system with a shared folder (lets say, /home/me/VMShared) between guest and host. On the guest machine user me is added to vboxsf group which allows full access to this ...
xaxa's user avatar
  • 439
0 votes
0 answers
144 views

Selinux on Ubuntu Server 22.04

I uninstalled apparmor then installed and enabled Selinux. But I'm getting errors, such as following; Failed to start D-Bus System Message Bus Failed to start Network Manager Server is booting but I'...
SpazzRabbit's user avatar
0 votes
0 answers
82 views

Bluetooth stopped working on 22.04 server - (apparently not) apparmor issue?

I'm running bluetooth on a Ubuntu 22.04 server, to communicate with some sensors. And it appears that the previously working setup has suddenly stopped working. The service reports OK: tmikoss@home-...
Toms Mikoss's user avatar
3 votes
0 answers
65 views

Discord (among others) filling syslog. Is there a privacy preserving solution yet?

Discord is constantly spamming the system for a ptrace read that is being repeatedly denied by AppArmor/Snap. This happens for good reason as it is intended to find what games you might be playing. ...
Ender's user avatar
  • 31
0 votes
1 answer
171 views

How to let Firefox access system files?

I am trying to package an HTML user guide with my app. Currently, it is placed in /etc/oqm/static/guide.html, with read permissions set to all. However, firefox doesn't seem to have access to it. I ...
Snappawapa's user avatar
1 vote
0 answers
195 views

Snap Firefox spams system logs with Apparmor / Mutter error

On my Ubuntu 23.10, during normal navigation Firefox adds lots of lines like this one to /var/log/syslog, so that the file gets bigger and bigger (it got to several gigabytes and filled up my disk): ...
Federico Poloni's user avatar
0 votes
0 answers
44 views

Whether Apparmor has to be enable for mysql database to work properly

We have OS unbuntu 22.04 with mysql 8.0.33 database and Hugepages is not working properly in 8.0.33 MySQL Community Server. We have set vm.nr_hugepages = 4646 in sysctl.conf file and large_pages=ON, ...
kalpesh's user avatar
1 vote
0 answers
71 views

apparmor complain mode profile with null-

After doing the following: sudo aa-easyprof /usr/local/bin/my_proc > usr.local.bin.my_proc sudo mv usr.local.bin.my_proc/etc/apparmor.d/ sudo apparmor_parser -r /etc/apparmor.d/usr.local.bin....
David Pilnik's user avatar
0 votes
0 answers
141 views

What do I do if AppArmor and GNOME configuration seem to be interfering with normal suspend/resume in Ubuntu 23.10

Follow up to my other question: https://askubuntu.com/a/1492540/806813 I followed the advice and got some log output below. Is there a magic wand? I'm an app developer and have the utmost respect for ...
mLstudent33's user avatar
0 votes
1 answer
1k views

audit: type=1400, apparmor='denied'

I have written a program .c and Makefile. Makefile created a file .ko, afer this I used the next commands: sudo insmod filename.ko sudo sysctl kernel.dmesg_restrict=0 dmesg | tail As result, I ...
Shwarz's user avatar
  • 1
6 votes
0 answers
2k views

apparmor="DENIED" operation="dbus_method_call"

My syslog is getting many messages like this: dbus-daemon[1311]: message repeated 12 times: [ apparmor="DENIED" operation="dbus_method_call" bus="session" path="/...
Mitchell Smith KB3GKC's user avatar
0 votes
1 answer
109 views

Apparmor prevents access to certificate bundle for IKEv2 VPN

I am trying to get a Strongswan / IKEV2 VPN set up on Ubuntu 23.04. I have the Network Manager plugin compiled and working. When I attempt the connection, I get the below error in syslog, that it is ...
Thystra's user avatar
  • 101
1 vote
0 answers
546 views

AppArmor issues with Libvirt

I have a fresh Ubuntu Server 22.04.3 and Debian 12.1.0 installed and updated. Along with Cockpit and Cockpit virtual machines on both tests machines. I am getting the following errors and warning when ...
Johannes's user avatar
0 votes
0 answers
4k views

Snap-store cannot create directory ‘/run/user/0’

22.04 LTS After some updates: sudo apt-get update sudo apt-get upgrade I am not able to open snap-store: sudo snap-store mkdir: cannot create directory ‘/run/user/0’: Permission denied Bus error ...
eSensitive's user avatar
0 votes
0 answers
119 views

How to configure AppArmor to deny disk access (real /etc/), while allowing container image access (virtual /etc)

I would like to allow a container to write to its own virtual disk (/etc), but prevent it from accessing the real disk (/etc). I believe this is possible with SELinux by using labels, but is it also ...
xaa29221's user avatar
0 votes
0 answers
105 views

Can AppArmor provide isolation between containers? (like SELinux)

I'm interested in using AppArmor to enforce security boundaries between containers. https://www.redhat.com/sysadmin/apparmor-selinux-isolation was written a few years ago comparing AppArmor and ...
Chris Sears's user avatar
0 votes
0 answers
128 views

Firefox crashes when trying to upload or browse a file

On some websites (like Facebook), there are buttons to select and upload a file. Clicking on them crashes Firefox. AppArmor seems to be involved. dmesg | tail gives me this: [ 2935.306465] audit: ...
user258532's user avatar
  • 1,258
0 votes
0 answers
193 views

Browser problem after upgrades

I'm running Ubuntu 22.04.02 LTS and just applied some updates as recommended by the OS. SInce then my Brave browser (& all other browsers) stopped working and would not launch from the sidebar. ...
Pankaj's user avatar
  • 179
0 votes
0 answers
188 views

System crashing on snap apparmor brave error

Relevant passage from syslog: Jun 29 18:06:28 noah-HP-Pavilion-Laptop-15-cs0xxx NetworkManager[1023]: <info> [1688076388.3763] manager: NetworkManager state is now CONNECT ED_SITE\ Jun 29 18:06:...
noah healy's user avatar
1 vote
0 answers
152 views

How to make other users have read access on a folder in my home?

My server is ubuntu22.04 and AppArmor is enabled. I want to share my folders (/home/syang/public) with other users. I give the read permission by chmod -R go+rX /home/syang/public, but they still ...
syang's user avatar
  • 11
0 votes
2 answers
483 views

Problems after upgrading to 22.04 to 22.04.2 LTS

I've upgraded to 22.04.2 LTS from 22.04 via the update manager and have noticed that many of my apps no longer work. As an example, if I run firefox at the terminal with the command snap run firefox ...
user2699676's user avatar
1 vote
2 answers
1k views

How do I repair an ubuntu install with apparmor running forever at startup?

I tried to upgrade an Ubuntu 22.04.2 LTS install to 23.04 last night. Upon reboot, the system will hang trying to start AppArmor. I found a few posts in the past about disabling app armor from ...
Lucas Holt's user avatar
2 votes
2 answers
158k views

What does it means: Warning from XXX: apparmor_parser: File 'XXX' missing feature abi, falling back to default policy feature abi

After a dist upgrade, I get a lot of warnings like this one: Warning from /etc/apparmor.d/sbin.dhclient (/etc/apparmor.d/sbin.dhclient line 4): apparmor_parser: File '/etc/apparmor.d/sbin.dhclient' ...
Marco Sulla's user avatar
0 votes
0 answers
181 views

Apparmor PHP8.1 requests rw access to "/"

I'm writing an apparmor profile for php (specifically 8.1), and I'm having some trouble with my particular config of php (this is for a webserver running dokuwiki). I've gotten all the functionality ...
user avatar
1 vote
1 answer
204 views

Apparmor full system implementation help

I am trying to implement Apparmor full system implementation on Ubuntu Bionic in AWS EC2 instances. https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy#distribution My goal is employ a deny-...
user596374's user avatar
9 votes
2 answers
5k views

Why is firefox trying to access fstab and how can I stop it?

Today I ran journalctl -k and found hundreds of entries like this one: Mar 27 22:15:11 charm kernel: audit: type=1400 audit(1679915711.422:1671372): apparmor="DENIED" operation="open&...
jj5's user avatar
  • 101
3 votes
1 answer
1k views

Gnome Seahorse Crashing all the time

I have Ubuntu 22.04.2 on my Latitude 5490. Very often I have a small window opening saying "The application Passwords and Keys has closed unexpectedly", mostly right after I boot my computer....
Cédric Van Rompay's user avatar
0 votes
0 answers
378 views

i am enabling SELinux in enforce mode but when i am rebooting my system crashed

i have install uubuntu 22.04 and debain 11 on different oracle machince. i am enabling SELinux in enforce mode but when i am rebooting my system crashed fist remove apparmor sudo systemctl stop ...
Abdul Jawad's user avatar
1 vote
0 answers
752 views

How to fix snap on ubuntu 22.04

I have a problem with snap. For example when I try to run firefox I have this error : pc:~$ firefox cannot open /tmp/snap-private-tmp: Permission denied When I look the log I have : kernel: audit: ...
linuxuser's user avatar
2 votes
0 answers
467 views

How to allow an apparmor profile to create a unix socket

On Ubuntu kinetic, I get multiple DENIED operations by apparmor in /var/log/syslog such as: operation="create" class="net" info="failed type and protocol match" error=-13 ...
jean-christophe manciot's user avatar
2 votes
2 answers
3k views

Snap/Apparmor stopped working in Ubuntu 22.04

I can no longer update snap apps on Ubuntu 22.04. If I try to refresh firefox I get: $ sudo snap refresh firefox error: cannot perform the following tasks: - Setup snap "firefox" (2277) ...
Mnemosyne's user avatar
  • 151
8 votes
1 answer
1k views

Excessive Firefox related AppArmor log entries

I recently installed and fully updated Ubuntu 22.04.1 LTS (jammy), 64-bit (amd64, x86_64). I removed 'snapd' and its default set of installed applications, which includes Firefox browser (which in 22....
Alex's user avatar
  • 89
1 vote
0 answers
161 views

Teach Firefox snap on 22.04 which applications are available to open which files, with PDF as an example

With firefox from snap on a freshly installed Ubuntu 22.04, the browser does not know any application to open a pdf. I have configured 'always ask' and get the dialogs shown below when clicking on a ...
Harald's user avatar
  • 1,180
4 votes
0 answers
958 views

Unable to start QEMU VM with SDL display due to Apparmor: cannot load AppArmor profile 'libvirt-32963ecb-fd2f-454c-93a6-c818af618ba4'

I am trying to run my virtual machines in virt-manager using SDL as my display, rather than a spice server. The VMs boot flawlessly with spice but when I switch its display to SDL I get the following ...
Kiko's user avatar
  • 41
3 votes
0 answers
1k views

apparmor denied lots of operation from snap, should I worry?

Lots of dbus_method_call are denied. If they are insecure why snap is doing this. If they are safe why apparmor denies them? Should I worry about this? I donot want to get flooded by DENIED, because ...
Wang's user avatar
  • 635
1 vote
1 answer
180 views

Apparmor.. What we can understand through logs?

Jan 1 09:39:14 amik-soc-pc kernel: [ 997.175974] audit: type=1400 audit(1672544354.292:83): apparmor="DENIED" operation="open" profile="snap.notepad-plus-plus.notepad-plus-...
Amiqul Islam Amik's user avatar
2 votes
1 answer
447 views

How do I add extra download directories to AppArmor for Firefox running under snap?

I recently updated to Ubuntu 22.04.1 and went to a site where I occasionally download things from. I typically save files from this site to an sshfs mount shared from another system on my home network,...
Mike Hicks's user avatar
3 votes
1 answer
1k views

How to turn off all the AppArmor DENIED messages from snaps?

I have a ton of AppArmor DENIED messages in my logs from the snap sandbox. How can I turn off these messages? Nov 22 21:39:28 dima kernel: [19901.633595] audit: type=1400 audit(1669142368.829:4586): ...
Merlijn Sebrechts's user avatar
0 votes
0 answers
189 views

Ubuntu Emergency Mode after Removal of Several Packages - App Armor Fails to Load Profiles

I was recently trying to install the Boost CPP libraries via sudo apt-get install libboost-all-dev. It had ask to remove several packages, so I mistakenly said yes to that prompt. Only after did I ...
Computer Crafter's user avatar
0 votes
2 answers
1k views

Cant launch chromium from snap

I have Ubuntu 20.04.4 LTS (odroid aarch64). When I try to launch chromium: cannot perform operation: mount --bind /snap/core20/current/etc/nsswitch.conf /tmp/snap.rootfs_IbY3Iu/etc/nsswitch.conf: ...
T0maas's user avatar
  • 101
1 vote
0 answers
96 views

Long boot time, Snap not working, Internet not working

Some days ago, I powered on my Lenovo IdeaPad 5 Pro with Ubuntu 22.04 LTS and noticed a very long boot time (More than 150 seconds). After logging in, I noticed wifi was connected successfully but the ...
AriyaDey's user avatar
  • 111
2 votes
0 answers
874 views

How to modify Firefox's AppArmor profile to allow evince to open links

When I try to open a link from a PDF using Evince I get an error message in the terminal. env: ‘/snap/bin/firefox’: Permission denied It used to work when Firefox wasn't a snap package. I think the ...
Mohamed Wafy's user avatar
2 votes
1 answer
13k views

How to get past `apparmor="DENIED" operation="open"`? [duplicate]

I've upgraded slack (v4.27.154) via snap on 20.04 and slack no longer runs. I've tried uninstalling and reinstalling to no avail. I've never messed with apparmor either. After attempting to start ...
Ender's user avatar
  • 125
0 votes
0 answers
190 views

AppArmor prevents Inkscape from opening files using "Open with"

I've got Inkscape 1.2 (snap) installed on Kubuntu 22.04. When I try to open an SVG file using the "Open with" context menu (or just double clicking the file), nothing happens, and in the ...
S.T. Veje's user avatar
  • 121
3 votes
0 answers
598 views

Chromium can't save files to home subfolders

I experience a blocking problem : Chromium (snap install), Chrome (deb package), Firefox (ubuntu's pre-installed) and Telegram (snap) can't save files to custom subfolders in home directory. Ex. ...
M. Hardy's user avatar

1
2 3 4 5
7