[pkg-apparmor] Bug#1153139: Bug#1153139: transmission: Latest transmission AppArmor policy missing policy for lock file

[Christian Boltz]

Hello,

Am Freitag, 6. November 2026, 14:41 schrieb Alexandre Rossi:
> > audit(1793928033.400:210): apparmor="DENIED" operation="file_lock"
> > class="file" profile="transmission-daemon"
> > name="/var/lib/transmission-daemon/.config/transmission-daemon/lock
> > " pid=1196139 comm="transmission-da" requested_mask="k"
> > denied_mask="k" fsuid=118 ouid=118

> I would suggest the following but did not test (not a apparmor user,
> yet?):
> 
> --- i/profiles/apparmor.d/abstractions/transmission-common
> +++ w/profiles/apparmor.d/abstractions/transmission-common
> @@ -167,6 +167,7 @@ abi <abi/5.0>,
>    owner @{HOME}/.cache/transmission/**  rw,
>    owner @{HOME}/.config/transmission/   w,
>    owner @{HOME}/.config/transmission/** rw,
> +  owner @{HOME}/.config/transmission/lock rwk,

Just wondering - is this really needed for ~/.config/? So far, the reports 
I've seen across various distributions (Ubuntu, openSUSE and Debian) 
only had denials for the following:

> diff --git i/profiles/apparmor.d/transmission w/profiles/apparmor.d/transmission 
> index 1f6d20e..6a1634c 100644
> --- i/profiles/apparmor.d/transmission
> +++ w/profiles/apparmor.d/transmission
> @@ -36,6 +36,7 @@ profile transmission-daemon
>   /usr/bin/transmission-daemon flags=(attach_disconnec owner
>   /var/lib/transmission{-daemon,}/.config/ rw,
>    owner /var/lib/transmission{-daemon,}/.config/transmission-daemon/rw, owner
>   /var/lib/transmission{-daemon,}/.config/transmission-daemon/** rw, 
> + owner /var/lib/transmission{-daemon,}/.config/transmission-daemon/lock rwk,
>   owner /var/lib/transmission{-daemon,}/downloads/** rw,
>    owner /var/lib/transmission{-daemon,}/info/**      rw,

The addition for /var/lib/.../lock is already pending upstream:
https://gitlab.com/apparmor/apparmor-profiles/-/merge_requests/80

The upstream MR also contains links to the Ubuntu and openSUSE bugreports.


Regards,

Christian Boltz
-- 
Linux: und wo bitte ist mein blauer Bildschirm?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 870 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20261106/4047db5b/attachment-0002.sig>