On Thu, 17 Jan 2019 22:06:58 +0100 Reiner Herrmann wrote: > Hi Leo, > > On Thu, Jan 17, 2019 at 12:13:56AM +0000, Leo Singer wrote: > > My apologies for spamming you with a bunch of different AppArmor issues. > > I am trying to understand and differentiate the issues myself; please > > let me know if it would be better for me just to send you a list of all > > of the errors. > > your reports are very appreciated! Thank you for doing that. > > > There are several error messages related to GL and Mesa, which I'm > > trying to understand better because of broader GPU stability issues > > on my Raspberry Pi 3B+. When I start surf, I see the following warnings: > > > > libGL error: MESA-LOADER: failed to retrieve device information > > MESA-LOADER: failed to retrieve device information > > MESA-LOADER: failed to retrieve device information > > Do you notice any issues (e.g. degraded performance) because of this?
No. > > [ 6898.198526] audit: type=1400 audit(1547682794.480:160): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/class/video4linux/" pid=6003 comm="gst-plugin-scan" > > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > There is an "abstractions/video" that I can include to allow access to > this directory. > > [ 6906.716855] audit: type=1400 audit(1547682802.996:161): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6906.720022] audit: type=1400 audit(1547682802.996:162): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6906.720086] audit: type=1400 audit(1547682802.996:163): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6906.720111] audit: type=1400 audit(1547682802.996:164): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.851155] audit: type=1400 audit(1547682805.132:165): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.852661] audit: type=1400 audit(1547682805.132:166): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.852715] audit: type=1400 audit(1547682805.132:167): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.852745] audit: type=1400 audit(1547682805.132:168): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > Does it help if /sys/devices/platform/soc/soc:gpu/* is allowed for reading? > Or will there be additional errors? That silences the errors. > > Regards, > Reiner
