[pkg-apparmor] Bug#1089225: Bug#1089225: apparmor.service can't start due to PROC undeclared

Richard rrosner5 at gmail.com
Sat Dec 7 16:58:07 GMT 2024


> That sounds like you have one or more profile files that lack
>      include <tunables/global>
> in their preamble/header.
>
> Unfortunately apparmor_parser doesn't report which file has this
> issue [1], therefore you'll need to check yourself with
>      grep -L tunables/global /etc/apparmor.d/*


Doesn't seem to be the case though, as the only output of that is

grep: /etc/apparmor.d/abi: Is a directory
/etc/apparmor.d/abi
grep: /etc/apparmor.d/abstractions: Is a directory
/etc/apparmor.d/abstractions
grep: /etc/apparmor.d/DEBIAN: Is a directory
/etc/apparmor.d/DEBIAN
grep: /etc/apparmor.d/disable: Is a directory
/etc/apparmor.d/disable
grep: /etc/apparmor.d/force-complain: Is a directory
/etc/apparmor.d/force-complain
grep: /etc/apparmor.d/libvirt: Is a directory
/etc/apparmor.d/libvirt
grep: /etc/apparmor.d/local: Is a directory
/etc/apparmor.d/local
grep: /etc/apparmor.d/tunables: Is a directory
/etc/apparmor.d/tunables

But If that means you want a list of files that to contain "PROC" but are missing "tunables/global", I made a list with

grep -rl "PROC" . | grep -v "tunables/global"

 From package apparmor: abstractions/apparmor_api/change_profile abstractions/apparmor_api/examine abstractions/apparmor_api/find_mountpoint abstractions/apparmor_api/introspect abstractions/ubuntu-browsers.d/java abstractions/ubuntu-browsers.d/plugins-common abstractions/apache2-common abstractions/bash abstractions/crypto abstractions/gio-open abstractions/gnome abstractions/mesa abstractions/nss-systemd abstractions/opencl-nvidia abstractions/opencl-pocl abstractions/postfix-common abstractions/samba-rpcd abstractions/ubuntu-konsole abstractions/audio abstractions/base abstractions/exo-open abstractions/kde-open5 abstractions/nameservice abstractions/nvidia abstractions/snap_browsers abstractions/pasta lsb_release nvidia_modprobe

evince: abstractions/evince usr.bin.evince

passt: abstractions/passt

libvirt-daemon-driver-lxc: abstractions/libvirt-lxc

libvirt-daemon-driver-qemu: abstractions/libvirt-qemu

isc-dhcp-client: sbin.dhclient

thunderbird: usr.bin.thunderbird

libreoffice-common: usr.lib.libreoffice.program.soffice.bin

ibus-hangul: usr.libexec.ibus-engine-hangul

cups-daemon: usr.sbin.cupsd

ntpsec/openntpd: usr.sbin.ntpd

libvirt-daemon: usr.sbin.libvirtd

libvirt-daemon-common: usr.lib.libvirt.virt-aa-helper
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20241207/de90fe1f/attachment.htm>


More information about the pkg-apparmor-team mailing list