** Tags added: log-noise
** Changed in: chromium-browser (Ubuntu)
Importance: Undecided => Low
** Changed in: chromium-browser (Ubuntu)
Status: New => Confirmed
** Summary changed:
- chromium snap: apparmor messages
+ Apparmor denials for gnutls, snap-update-ns, implicit_layer.d
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/2028547
Title:
Apparmor denials for gnutls, snap-update-ns, implicit_layer.d
Status in chromium-browser package in Ubuntu:
Confirmed
Bug description:
chromium 116.0.5845.32-hwacc 2551 latest/edge/… canonical**
I'm getting a few apparmor DENIED messages with this snap on my lunar
system:
a) about /var/lib
[68468.147326] audit: type=1400 audit(1690201352.140:586): apparmor="DENIED"
operation="open" class="file" profile="snap-update-ns.chromium"
name="/var/lib/" pid=38424 comm="5" requested_mask="r" denied_mask="r" fsuid=0
ouid=0
b) about /etc/gnutls/config (which is a valid gnutls configuration file, just
not shipped with the package, but users can create it, see [1]). I listed
several messages because it's a different command in each
[68468.312147] audit: type=1400 audit(1690201352.304:589): apparmor="DENIED"
operation="open" class="file" profile="snap.chromium.chromium"
name="/etc/gnutls/config" pid=38507 comm="gio-querymodule" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
[68468.312863] audit: type=1400 audit(1690201352.304:590): apparmor="DENIED"
operation="open" class="file" profile="snap.chromium.chromium"
name="/etc/gnutls/config" pid=38506 comm="gdk-pixbuf-quer" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
[68468.487025] audit: type=1400 audit(1690201352.480:591): apparmor="DENIED"
operation="open" class="file" profile="snap.chromium.chromium"
name="/etc/gnutls/config" pid=38397 comm="chrome" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
[68476.836329] audit: type=1400 audit(1690201360.828:608): apparmor="DENIED"
operation="open" class="file" profile="snap.chromium.chromium"
name="/etc/gnutls/config" pid=38801 comm="exe" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
c) /etc/vulkan/implicit_layer.d
[68469.077529] audit: type=1400 audit(1690201353.068:595): apparmor="DENIED"
operation="open" class="file" profile="snap.chromium.chromium"
name="/etc/vulkan/implicit_layer.d/" pid=38625 comm="chrome" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
1. https://ubuntu.com/server/docs/gnutls
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/2028547/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
