Questions tagged [apparmor]

AppArmor is a Linux Security Module

Filter by
Sorted by
Tagged with
0 votes
0 answers
38 views

Ubuntu Emergency Mode after Removal of Several Packages - App Armor Fails to Load Profiles

I was recently trying to install the Boost CPP libraries via sudo apt-get install libboost-all-dev. It had ask to remove several packages, so I mistakenly said yes to that prompt. Only after did I ...
0 votes
0 answers
25 views

Ubuntu is not opening any application but it would iust load

I have an Ubuntu flash drive on which I have flashed Ubuntu 22.04.1 version on it (using Rufus) with persistence. When I booted it on and try to open Firefox it would just load in the top left corner, ...
  • 1
0 votes
0 answers
17 views

AppArmor / Snapd Blocking Itself

I am on Ubuntu 20.04 desktop and for whatever reasons AppArmor decided to block my Chromium, Epiphany, and Opera browsers (all installed via snaps). First I went through the kern.log and whitelisted ...
0 votes
0 answers
32 views

Allow Pycharm to send kill command

I am trying to kill a tcpdump process from within PyCharm (the tcpdump process was spawned by PyCharm). When I try to issue os.system("kill -15 tcpdump") Pycharm reports Permission denied. ...
0 votes
0 answers
42 views

How to restrict tools to a single-use path with AppArmor?

I would like to restrict tools like unzip to only have access to the paths they are working on, like this: unzip a.zip -d /path/to/directory unzip /absolute/path/to/b.zip -d /another/unrelated/path ...
0 votes
0 answers
104 views

Apparmor: start condition failed

I'm running Ubuntu 20.04 from a persistent live USB disk and I've had trouble with a snap application that stopped running because Apparmor hadn't started. When I ran systemctl status apparmor, I got ...
  • 173
0 votes
1 answer
211 views

Cant launch chromium from snap

I have Ubuntu 20.04.4 LTS (odroid aarch64). When I try to launch chromium: cannot perform operation: mount --bind /snap/core20/current/etc/nsswitch.conf /tmp/snap.rootfs_IbY3Iu/etc/nsswitch.conf: ...
  • 101
1 vote
0 answers
35 views

Long boot time, Snap not working, Internet not working

Some days ago, I powered on my Lenovo IdeaPad 5 Pro with Ubuntu 22.04 LTS and noticed a very long boot time (More than 150 seconds). After logging in, I noticed wifi was connected successfully but the ...
0 votes
0 answers
72 views

Load AppArmor profiles takes nearly 10 minutes

Every time I reboot my Contabo server running Ubuntu 20.04 it takes anywhere from 6-12 minutes to boot, either from a reboot or fresh boot (shutdown->boot). I opened up the VNC viewer to find the ...
1 vote
0 answers
282 views

How to modify Firefox's AppArmor profile to allow evince to open links

When I try to open a link from a PDF using Evince I get an error message in the terminal. env: ‘/snap/bin/firefox’: Permission denied It used to work when Firefox wasn't a snap package. I think the ...
2 votes
1 answer
3k views

How to get past `apparmor="DENIED" operation="open"`? [duplicate]

I've upgraded slack (v4.27.154) via snap on 20.04 and slack no longer runs. I've tried uninstalling and reinstalling to no avail. I've never messed with apparmor either. After attempting to start ...
  • 123
0 votes
0 answers
82 views

AppArmor prevents Inkscape from opening files using "Open with"

I've got Inkscape 1.2 (snap) installed on Kubuntu 22.04. When I try to open an SVG file using the "Open with" context menu (or just double clicking the file), nothing happens, and in the ...
  • 111
0 votes
0 answers
246 views

Installing snapd in LXC container

I have been attempting to install snapd in a privileged Ubuntu LXC container, running on Proxmox. I have Plex running on this container, and I'd like to install tautulli. I first started by trying to ...
3 votes
0 answers
265 views

Chromium can't save files to home subfolders

I experience a blocking problem : Chromium (snap install), Chrome (deb package), Firefox (ubuntu's pre-installed) and Telegram (snap) can't save files to custom subfolders in home directory. Ex. ...
0 votes
1 answer
284 views

22.04 server, bind9 logging

i used bind9 on 20.04 LTS over years, now upgrade to 22.04 an "copy" the configuration. bind9 zones and requests works fine as expected, but i have trouble with logging. including the ...
0 votes
0 answers
294 views

nextcloud error after upgrading to ubuntu 22.04

I had Ubuntu 21.10 and installed next cloud. It worked without problem. A few days ago I upgraded Ubuntu to 22.04, and now get an error dialog (every 30s) that NextCloud can't write the log file in ...
  • 662
0 votes
0 answers
131 views

How can I grant permission to snap application (evince) (ubuntu 18.4) to open files outside home?

I have installed evince through snap in ubuntu 18.04 and only opens files inside home folder. ** (evince:6214): WARNING **: 00:03:47.818: set_filenames: Error when getting information for file “/...
1 vote
1 answer
581 views

How to install firefox from snap, when my /tmp is symlinked to another place?

Upgraded my desktop to ubuntu jammy, and this is forcing me to use firefox from snaps. The problem - snap install firefox fails with: error: cannot perform the following tasks: - Run configure hook of ...
  • 113
1 vote
0 answers
2k views

Why can't my mysql start after modification datadir?

question os:ubuntu 20.04/22.04(have tried) mysql: mysql8 disk: mechanical hard drive Modifying the storage path mysql will not start. I have followed the instructions on the internet countless times, ...
  • 11
2 votes
2 answers
1k views

How would i enable the Firefox apparmor profile in 22.04

Ok so I found this on the "How can I enable AppArmor for Firefox?" line on the Ubuntu wiki which is out of date because Firefox is now a snap. I think the profile is enabled but first where ...
  • 698
0 votes
1 answer
177 views

Is it safe to uninstall AppArmor?

I made hardening my Ubuntu Laptop by usg tool and cis scripts. Now I have a few strange issues in my work network environment. For example with NAC, DHCP client etc. I would like to simplify my ...
0 votes
0 answers
162 views

Apparmor: lxc-containers contains no profile

I ran an audit on my ubuntu 18.04 ec2 instance against Ubuntu 18.04 CIS benchmark. The issue was reported as " Ensure all AppArmor Profiles are enforcing" and it was Failed. When I was ...
4 votes
1 answer
165 views

Cannot access GIMP help because AppArmor stops it

I just installed GIMP through Ubuntu Software, which I understand uses snap. I tried to access GIMP help but it was blocked. I got this error: Could not open 'https://docs.gimp.org/2.10/en/gimp-help....
1 vote
1 answer
455 views

msmtp logging doesn't work in /var/log/mail/[logfile].log

Good day I'm using msmtp to send mails. I have different accounts that log to different logfiles. Unfortunately whenever it tries to log the following error appears: send-mail: cannot log to /var/log/...
  • 33
8 votes
2 answers
585 views

Evince can not open links in snap Firefox

When I click on a link in a PDF document in Evince, it does not work. Instead, I only see cursor turning into a spinner and a message appearing in the terminal: env: ‘/snap/bin/firefox’: Permission ...
1 vote
1 answer
989 views

Not able to install 'slack' through snap

While installing slack from snap store using the command line (sudo snap install slack --classic), I get the following errors. Please help me resolve this. error: cannot perform the following tasks: ...
  • 43
0 votes
1 answer
483 views

snapd and SElinux

I have SElinux installed so obviously I can't install app armor but I'm trying to to install a snapd package and when I try to install snapd I get The following additional packages will be installed: ...
0 votes
0 answers
133 views

How to open port 990 on Ubuntu

I am not able to connect to my server using FTPS. I noticed that port 990 is not open. When I try to connect to my server on port number 990 I get the following: telnet myip 990 Connecting To myip......
2 votes
1 answer
3k views

telegram-desktop does not start

Suddenly, telegram-desktop has stopped working on my laptop. I am running the snap version 3.2.0 on ubuntu 20.04. From the command line, or using the GUI, it stops immediately. I have found 2 errors: ...
  • 23
1 vote
0 answers
344 views

AppArmor/Certbot error: cannot change profile for the next exec call: No such file or directory

Ubuntu 20.04.3. This is a server that I upgraded last winter from 16.04 to 20.04. I use Webmin/Virtualmin to do day-to-day management. As a renewal for a LetsEncrypt cert came to be due last week, I ...
7 votes
4 answers
5k views

after Ubuntu 21.10 upgrade: "cannot attach cgroup program" operation not permitted

Right after upgrading a Ubuntu 21.04 to 21.10, I got this issue: Chromium/Firefox won't start. The error(seen in terminal) is: $ firefox cannot attach cgroup program: Operation not permitted
  • 1,309
0 votes
1 answer
483 views

Apparmor Failure in Ubuntu Desktop 21.10

Are there anyone experiencing failure with Apparmor which prevents boot? Besides several of the Apparmor profiles seem corrupted.
0 votes
1 answer
170 views

Apparmor: Allow Inkscape to execute extensions in $HOME/config/inkscape/extensions/

I want to extend Inkscape (installed with snap) by putting the SVGO-Optimizer SVGO in Inkscape's local extension directory. According to the Inkscape preferences dialog (Edit/Preferences/System), the ...
  • 4,476
2 votes
0 answers
221 views

AppArmor - restrict a directory by default (whitelist)

I'm looking into AppArmor and from what I have seen, it seems like it allows access to everything by default and only puts access restrictions to application for which a profile has been created. Is ...
0 votes
0 answers
151 views

Are Windows viruses recognized by AppArmor or SELinux?

I know windows and Linux are completely different environments but are there developers that implement the recognition of windows viruses in AppArmor or SELinux? I'd like it so you don't have to scan ...
4 votes
1 answer
1k views

Discord, how can I make it stop flooding my logs?

I am on ubuntu 20.04 focal, and I have discord installed. While discord is active, I get loads of messages in dmesg from it. [ 1242.218055] audit: type=1400 audit(1626585289.753:15781): apparmor="...
  • 14.3k
1 vote
0 answers
180 views

How to stop apparmor spew in the logs

I try to keep my dmesg clean, so I can see the signal in the noise. However, I am annoyed by the spamming that app armor does in the logs: [74339.538450] audit: type=1400 audit(1620404490.953:75): ...
  • 1,238
2 votes
1 answer
176 views

AppArmor Firefox profile breaks links in e-mails on Thunderbird

After activating the default AppArmor profile for Firefox, links in e-mails on Thunderbird no longer work. Expected behavior: When I click on a link in Thunderbird, Firefox starts (if necessary) and ...
  • 187
1 vote
0 answers
375 views

Configuring AppArmor for Firefox ESR

i am using Firefox ESR (currently Version 78.1) for linux, "normal" firefox is completly removed. Now i want to configure AppArmor for Firefox ESR but it doesn't seem to work. I have ...
3 votes
1 answer
777 views

How to configure AppArmor for Snaps?

I've been using Snaps such as telegram-desktop and caprine for some time. caprine worked for a few days, but then AppArmor started to show denials in dmesg. caprine didn't even start, just crashed ...
  • 842
0 votes
0 answers
185 views

libusb access denial (not udev, not apparmor)

I am getting a: libusb: error [_get_usbfs_fd] libusb couldn't open USB device /dev/bus/usb/001/007: Operation not permitted error when trying to pass through a USB disk to the virtual machine. ...
user avatar
2 votes
0 answers
2k views

snap failing to start due to apparmor profiles

Recently every single snap package on my Ubuntu install stopped working. When I would try and run them in console I would get the error: snap-confine has elevated permissions and is not confined but ...
-1 votes
1 answer
120 views

How the apparmor works?

How to use apparmor to confine reading one file if there are two files? I have used autodep, enforce, and complain
  • 3
2 votes
0 answers
923 views

docker container stop denied by apparmor

I use docker 19.03.13 installed from snap on my 20.04 machine. Long time all works well but now I can't stop containers that I have started as unprivileged user. Stopping as root as also not possible. ...
0 votes
2 answers
344 views

Stop Snaps from accessing user home directory?

I am trying to sandbox all my applications by default using firejail. Firejail doesn't support snap applications. It appears that by default if requested by a snap, snapd will grant the snap read/...
  • 206
1 vote
0 answers
95 views

Getting errors while trying to update "vlc" from terminal or snap store

I am unable to either update or remove "vlc" from terminal or snap store. I get the following error while trying to run snap refresh vlc command from terminal. error: cannot perform the ...
  • 43
4 votes
2 answers
2k views

Why does apparmor kill dhclient?

I successfully upgraded my KVM server to 20.04.1 LTS but when later trying to access it by ssh, there were no network route to the server, while the VMs still were happily running just great. Logging ...
  • 141
1 vote
0 answers
911 views

How to execute the `hello-world` snap on Ubuntu 20.10 successfully?

I recently attempted to use a couple of snap packages on 20.10. I had troubles with those. So I am back to first principles. As shown in this response: How to use Snap Packages when $HOME is not /...
  • 342
0 votes
1 answer
2k views

MariaDB 10.3 does not start after Ubuntu 20.04 reboots after changing the data directory to a different drive

I'm having an unusual problem. I tried to change the data directory for my MariaDB installation and it does not work after rebooting the computer: I copied the entries from /var/lib/mysql/ to /mnt/...
2 votes
0 answers
221 views

apparmor - can't print, found 32 profiles are in enforce mode

I recently installed Ubuntu 20.10 (had been using 18.04). I tried printing (which I had no problem doing before) and noticed apparmor messages about cups being DENIED. I found some sites which had ...
  • 21

1
2 3 4 5 6