Bug#1127671: "WARNING: Glycin running without sandbox" when AppArmor profile doesn't allow the sandbox to work

[Carlos Silva]

Dear all,

Is there any news on this?

I know that
sudo aa-disable /etc/apparmor.d/libreoffice-*

Would make the warning go away. 
But is there any other way, It seems that the libreoffice profile needs to be updated to include glycin.

Thanks,
Carlos

On Wed, 25 Feb 2026 12:05:23 +0100 intrigeri <intrigeri at debian.org> wrote:
> intrigeri (2026-02-24):
> > IIRC I've seen a comment somewhere in a discussion on an issue or PR
> > in the https://github.com/roddhjav/apparmor.d/ project that said it
> > was possible to force Glycin to turn off its sandboxing, by denying
> > 1 of the access it was using on startup to check if sandboxing
> > was possible.
> >
> > This is clearly a poor long-term choice, but if a 1-liner quick fix
> > implements this (bringing us back to where we were 2 weeks ago in
> > terms of security and bugs), it might buy us some time while we figure
> > out how we want to approach the whole thing.
> >
> > I'll try to find this workaround tomorrow.
> 
> I could not figure out how to do that without evince 48.1-3 crashing
> on startup, so I'm not confident in this temporary quick fix.
> 
> Cheers,
> -- 
> intrigeri
> 
>