Questions tagged [apparmor]

AppArmor is a Linux Security Module

Filter by
Sorted by
Tagged with
1
vote
1answer
244 views

after Ubuntu 21.10 upgrade: "cannot attach cgroup program" operation not permitted

Right after upgrading a Ubuntu 21.04 to 21.10, I got this issue: Chromium/Firefox won't start. The error(seen in terminal) is: $ firefox cannot attach cgroup program: Operation not permitted
1
vote
0answers
146 views

Apparmor Failure in Ubuntu Desktop 21.10

Are there anyone experiencing failure with Apparmor which prevents boot? Besides several of the Apparmor profiles seem corrupted.
0
votes
0answers
16 views

Can't disable apparmor profile for nmap

I'm trying to run nmap on Ubuntu 20.04, but it's unable to create raw socket: [620103.322455] audit: type=1400 audit(1633414966.421:70): apparmor="DENIED" operation="create" ...
0
votes
0answers
20 views

How to move tang from port 80

I set up tang on an Ubuntu 20.04 server and it works fine. But I would like to move tang off port 80 because I don't want to move Apache. This page has the RHEL commands for changing tang's port ...
0
votes
1answer
45 views

Apparmor: Allow Inkscape to execute extensions in $HOME/config/inkscape/extensions/

I want to extend Inkscape (installed with snap) by putting the SVGO-Optimizer SVGO in Inkscape's local extension directory. According to the Inkscape preferences dialog (Edit/Preferences/System), the ...
0
votes
0answers
30 views

AppArmor - restrict a directory by default (whitelist)

I'm looking into AppArmor and from what I have seen, it seems like it allows access to everything by default and only puts access restrictions to application for which a profile has been created. Is ...
0
votes
0answers
19 views

How to allow tomcat from apparmor

have install tomcat 8 in Ubuntu 18 but web page is not accessible on either of port(8080/8443) however same is accessible post disabling apparmor. Is tomcat can run with apparmor? please help?
0
votes
0answers
51 views

Are Windows viruses recognized by AppArmor or SELinux?

I know windows and Linux are completely different environments but are there developers that implement the recognition of windows viruses in AppArmor or SELinux? I'd like it so you don't have to scan ...
3
votes
1answer
104 views

Discord, how can I make it stop flooding my logs?

I am on ubuntu 20.04 focal, and I have discord installed. While discord is active, I get loads of messages in dmesg from it. [ 1242.218055] audit: type=1400 audit(1626585289.753:15781): apparmor="...
0
votes
0answers
15 views

Why AppArmor logs file read access requests in ASCII expressed as pairs of HEX bytes to the audit.log

AppArmor by default logs all files access DENY to the audit.log in the ASCII text format type=AVC msg=audit(1624892152.939:757): apparmor="DENIED" operation="open" profile="/...
0
votes
0answers
79 views

Apparmor profile for wine

I am trying to setup an apparmor profile for wine so that wine can only read and write inside the .wine directory i have seen some threads asking about this but none of those questions are detailed. ...
0
votes
0answers
55 views

dpkg: error processing package apparmor

can someone help me here, i have this problem on an Ubuntu 14.04.6 LTS system. thanks in advance Xaxa The following packages were automatically installed and are no longer required: gdisk gir1.2-...
1
vote
0answers
77 views

How to stop apparmor spew in the logs

I try to keep my dmesg clean, so I can see the signal in the noise. However, I am annoyed by the spamming that app armor does in the logs: [74339.538450] audit: type=1400 audit(1620404490.953:75): ...
0
votes
0answers
338 views

persistant usb script running on boot (apparmor)

I have ubuntu persistant usb and I have issue with open apps on startup because apparmomr And I have sollution on startup in terminal I write next: sudo apparmor_parser -r /etc/apparmor.d/*snap-...
2
votes
1answer
80 views

AppArmor Firefox profile breaks links in e-mails on Thunderbird

After activating the default AppArmor profile for Firefox, links in e-mails on Thunderbird no longer work. Expected behavior: When I click on a link in Thunderbird, Firefox starts (if necessary) and ...
1
vote
0answers
95 views

Configuring AppArmor for Firefox ESR

i am using Firefox ESR (currently Version 78.1) for linux, "normal" firefox is completly removed. Now i want to configure AppArmor for Firefox ESR but it doesn't seem to work. I have ...
2
votes
0answers
158 views

How to configure AppArmor for Snaps?

I've been using Snaps such as telegram-desktop and caprine for some time. caprine worked for a few days, but then AppArmor started to show denials in dmesg. caprine didn't even start, just crashed ...
1
vote
0answers
78 views

libusb access denial (not udev, not apparmor)

I am getting a: libusb: error [_get_usbfs_fd] libusb couldn't open USB device /dev/bus/usb/001/007: Operation not permitted error when trying to pass through a USB disk to the virtual machine. ...
0
votes
0answers
17 views

HOW to customize docker container profile to implement fine-grained network access control

1.materials apparmor policy reference https://gitlab.com/apparmor/apparmor/-/wikis/AppArmor_Core_Policy_Reference#AppArmor_globbing_syntax 2.my profile #include <tunables/global> profile docker-...
0
votes
0answers
532 views

snap failing to start due to apparmor profiles

Recently every single snap package on my Ubuntu install stopped working. When I would try and run them in console I would get the error: snap-confine has elevated permissions and is not confined but ...
-1
votes
1answer
59 views

How the apparmor works?

How to use apparmor to confine reading one file if there are two files? I have used autodep, enforce, and complain
2
votes
0answers
521 views

docker container stop denied by apparmor

I use docker 19.03.13 installed from snap on my 20.04 machine. Long time all works well but now I can't stop containers that I have started as unprivileged user. Stopping as root as also not possible. ...
0
votes
0answers
124 views

How to set up apparmor for Bind DNS?

I have figured that on my server apparmor was preventing me from running Bind in chrooted environment. I have created folder /chroot/named with all of the directories and files that Bind requires in ...
0
votes
2answers
135 views

Stop Snaps from accessing user home directory?

I am trying to sandbox all my applications by default using firejail. Firejail doesn't support snap applications. It appears that by default if requested by a snap, snapd will grant the snap read/...
1
vote
0answers
41 views

Getting errors while trying to update "vlc" from terminal or snap store

I am unable to either update or remove "vlc" from terminal or snap store. I get the following error while trying to run snap refresh vlc command from terminal. error: cannot perform the ...
0
votes
0answers
41 views

How to configure snap permissions as user or root?

I have big problems using chromium webapps loading files from file system. The reason is chromium is snaped in latest Ubuntu. This is ok with me, however it is extremely hard to understand and ...
1
vote
2answers
476 views

Why does apparmor kill dhclient?

I successfully upgraded my KVM server to 20.04.1 LTS but when later trying to access it by ssh, there were no network route to the server, while the VMs still were happily running just great. Logging ...
0
votes
0answers
87 views

snap broken badly - no permission

I'm unable to run snaps when running with my domain account. Running it from a local account placed /home/sysmikkel everything works fine. But using my account 'mikkel' placed in /home/elements....
0
votes
0answers
20 views

Verify AppArmor is running for directory 'X'

Is there a way I can verify AppArmor is enabled for "current" directory or a directory specified from me? When I add a directory 'X' in the the file ...tunables/home.d/my_file I get the ...
1
vote
0answers
347 views

How to execute the `hello-world` snap on Ubuntu 20.10 successfully?

I recently attempted to use a couple of snap packages on 20.10. I had troubles with those. So I am back to first principles. As shown in this response: How to use Snap Packages when $HOME is not /...
0
votes
1answer
976 views

MariaDB 10.3 does not start after Ubuntu 20.04 reboots after changing the data directory to a different drive

I'm having an unusual problem. I tried to change the data directory for my MariaDB installation and it does not work after rebooting the computer: I copied the entries from /var/lib/mysql/ to /mnt/...
1
vote
0answers
123 views

apparmor - can't print, found 32 profiles are in enforce mode

I recently installed Ubuntu 20.10 (had been using 18.04). I tried printing (which I had no problem doing before) and noticed apparmor messages about cups being DENIED. I found some sites which had ...
1
vote
0answers
252 views

Python sees LD_LIBRARY_PATH only when executing as root (Ubuntu 20.04)

I am facing a tricky problem with LD_LIBRARY_PATH in python3.8 on Ubuntu 20.04.1. When I execute with my user the following lines: user@host>export LD_LIBRARY_PATH=/usr/lib user@host>echo $...
12
votes
3answers
14k views

How to uninstall snap?

I use Ubuntu for 12 years, and snap in the recent releases of Ubuntu is really disgrace. It creates lots of problems. After an upgrade, Chromium does not start with the error: chromium_chromium....
3
votes
0answers
498 views

AppArmor error Gnome Software Ubuntu 20.04

I'm very new to this stuff. I had a problem with snap-software so I purged it and installed gnome-software and I'm seeing the below error message. Sorry, something went wrong: An AppArmor policy ...
1
vote
0answers
92 views

apparmor: how to allow emacs snap to redirect output to files on CLI?

I'm running Ubuntu 20.04.1 LTS and: $ which emacs /snap/bin//emacs $ emacs --version GNU Emacs 27.1 If I set up this file: mwe.el (defun output () (princ (apply #'concat (nthcdr 5 command-line-...
0
votes
1answer
891 views

How do I check Apparmor version? [duplicate]

How can I check the version of the installed Apparmor on a Linux system?
5
votes
0answers
1k views

How to disable apparmor for Chromium snap? (Ubuntu 20.04)

When I type: sudo apparmor_status these 2 profiles are shown as enforce: snap.chromium.chromedriver snap.chromium.chromium When I type: sudo aa-complain /var/lib/snapd/apparmor/profiles/snap.chromium....
0
votes
2answers
804 views

SSSD with LDAP makes apparmor very noisy in syslog

When loging in with SSSD configured against LDAP, syslog becomes very noisy with apparmor messages. This is somewhat annoying when scanning the logs for valuable information. Maybe someone already ...
1
vote
0answers
146 views

Apparmor driving me nut

not way to make some snap running on my office machine (ubuntu 20.04 focal) I try for example to run drawio (from snap) with no success. what is strange is that on my home machine (ubuntu focal 20.04) ...
1
vote
0answers
60 views

MySQL Workbench apparmor error in Ubuntu 18.04 [duplicate]

When I try to launch MySQL Workbench I get the following AppArmor error When I run sudo aa-status I get below result 48 profiles are in enforce mode. : : : : snap-update-ns.mysql-...
1
vote
1answer
60 views

Who is the intended user for apparmor?

Ubuntu 18.04.2. I am not a technically trained person, pretty much just a regular layman who uses Ubuntu. I've been reading about apparmor, and struggling to understand its benefit. I understand that ...
1
vote
1answer
257 views

AppArmor, Ubuntu 20.04 Focal Fossa

Good day, I'm currently a newbie at Linux. I've been doing well as I have managed to find most of the commands I have needed so far on google.I found a link on google that said to start you first need ...
0
votes
1answer
114 views

apparmor profile for pdns-recursor blocks to start the pdns-recursor service on systemd

When I generate the apparmor profile with aa-genprof for /usr/sbin/pdns_recursor everything seems to be OK. But apparmor blocks the service startup even in complain mode. I have launched a brand new ...
2
votes
1answer
468 views

Why is my dmesg log full of apparmor messages about snapd-confine

Ubuntu 18.04.4 LTS I've been ignoring this for months because it's just an annoyance, but does anyone know of an easy way to stop these messages from flooding my dmesg? audit: type=1400 audit(...
4
votes
1answer
4k views

Ubuntu 20.04 MySQL Datadir Permissions (Errno 13)

askubuntu.com, I need some help debugging my MySQL setup! For the past couple years, I have been hosting my local development resources on Dropbox, and it's been working wonderfully. This past week, I ...
0
votes
0answers
194 views

Snap , app armor and gimp plugins

I installed gimp 2.10 using snap in Ubuntu 16.04 32-bit and want extract/move plugins to required directory: /home/velukutty/snap/gimp/253/.config/GIMP/2.10/plug-ins But unable to do so due to ...
2
votes
1answer
1k views

docker-compose denied by AppArmor outside of $HOME - how to fix?

I'm trying to run docker-compose up from /data/myproject but it fails: /data/myproject# docker-compose up ERROR: Can't find a suitable configuration file in this directory or any ...
2
votes
0answers
84 views

Software center doesn't have any proper icons and outputs a lot of errors when going into the update section

I'm a complete newbie that installed Ubuntu a couple of days ago and ran into some issues. The software center looks like this: And when I enter the updates section, the following errors are ...
1
vote
0answers
723 views

Understanding AppArmor log messages

I'm trying to understand different log messages in /var/log/kern.log that started appearing a few days ago. I'm new to AppArmor, I've read man pages and I understand the concepts, I've searched on the ...

1
2 3 4 5 6