[Pkg-kde-extras] Bug#946931: Bug#946931: quassel-core: apparmor denials

Scott Kitterman debian at kitterman.com
Wed Dec 18 02:42:59 GMT 2019


Can you ask them to try this change:

https://salsa.debian.org/qt-kde-team/extras/quassel/commit/de4b3bc5fefa3e2928745f24acb18ca4b75599f6

Scott K

On December 18, 2019 1:44:05 AM UTC, Seth Arnold <seth.arnold at canonical.com> wrote:
>Package: quassel-core
>Severity: important
>
>Hello, I'm reporting this bug on behalf of a friend, so I've trimmed
>unrelated context from the bug report.
>
>My friend's paste is at https://paste.debian.net/1120576/
>
>There's some AppArmor DENIED lines that caused him to disable the
>apparmor
>profile for this service:
>
>
>audit: type=1400 audit(1576016744.839:6): apparmor="DENIED"
>operation="open" profile="/usr/bin/quasselcore"
>name="/proc/sys/kernel/random/boot_id" pid=874 comm="quasselcore"
>requested_mask="r" denied_mask="r" fsuid=108 ouid=0
>audit: type=1400 audit(1576016744.851:7): apparmor="DENIED"
>operation="open" profile="/usr/bin/quasselcore"
>name="/var/lib/dbus/machine-id" pid=874 comm="quasselcore"
>requested_mask="r" denied_mask="r" fsuid=108 ouid=0
>audit: type=1400 audit(1576016744.867:8): apparmor="DENIED"
>operation="link" profile="/usr/bin/quasselcore"
>name="/var/lib/quassel/quasselcore.conf" pid=874 comm="quasselcore"
>requested_mask="l" denied_mask="l" fsuid=108 ouid=108
>target="/var/lib/quassel/#131283"
>
>Adding lines:
>
>  /proc/sys/kernel/random/boot_id r,
>  /var/lib/dbus/machine_id r,
>  /var/lib/quassel/quasselcore.conf l,
>
>to the quasselcore profile should address these issues, though there's
>a
>chance that once these are allowed, something else would fail.
>
>Thanks
>
>_______________________________________________
>pkg-kde-extras mailing list
>pkg-kde-extras at alioth-lists.debian.net
>https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-kde-extras



More information about the pkg-kde-extras mailing list