https://bugs.kde.org/show_bug.cgi?id=503132
Bug ID: 503132
Summary: krdc spams the kernel logs with apparmor audit
messages
Classification: KDE Neon
Product: neon
Version: unspecified
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: Snaps
Assignee: neon-b...@kde.org
Reporter: l.bonn...@laposte.net
CC: sgmo...@kde.org
Target Milestone: ---
SUMMARY
The apparmor profile for krdc should be updated to remove audit messages.
STEPS TO REPRODUCE
1. start /snap/bin/krdc
2. connect to a VNC server
OBSERVED RESULT
The following messages are logged by the kernel:
[23322.233955] audit: type=1400 audit(1745260174.132:579): apparmor="DENIED"
operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=24602
comm="snap-confine" capability=12 capname="net_admin"
[23322.233967] audit: type=1400 audit(1745260174.132:580): apparmor="DENIED"
operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=24602
comm="snap-confine" capability=38 capname="perfmon"
[23322.236080] audit: type=1400 audit(1745260174.134:581): apparmor="DENIED"
operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=24602
comm="snap-confine" capability=4 capname="fsetid"
[23328.377203] audit: type=1400 audit(1745260180.276:583): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/proc/sys/kernel/core_pattern" pid=24602 comm="krdc" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
[23328.434437] audit: type=1400 audit(1745260180.333:584): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/kdedefaults/kdeglobals" pid=24602 comm="krdc"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[23328.435569] audit: type=1400 audit(1745260180.335:585): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/krdcrc" pid=24602 comm="krdc" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=1000
[23328.462480] audit: type=1400 audit(1745260180.361:586): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/krdcrc" pid=24602 comm="krdc" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=1000
[23328.486850] audit: type=1400 audit(1745260180.386:587): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/kdedefaults/kcminputrc" pid=24602 comm="krdc"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[23328.486860] audit: type=1400 audit(1745260180.386:588): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/kcminputrc" pid=24602 comm="krdc"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[23328.705771] audit: type=1326 audit(1745260180.605:589): auid=1000 uid=1000
gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc"
exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0
ip=0x7d58eb76e6f1 code=0x50000
[23328.705778] audit: type=1326 audit(1745260180.605:590): auid=1000 uid=1000
gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc"
exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0
ip=0x7d58eb76e6f1 code=0x50000
[23328.705781] audit: type=1326 audit(1745260180.605:591): auid=1000 uid=1000
gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc"
exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0
ip=0x7d58eb76e6f1 code=0x50000
[23328.705784] audit: type=1326 audit(1745260180.605:592): auid=1000 uid=1000
gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc"
exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0
ip=0x7d58eb76e6f1 code=0x50000
[23338.700767] audit: type=1400 audit(1745260190.599:620): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/kdedefaults/kdeglobals" pid=24602 comm="krdc"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[23340.957849] audit: type=1400 audit(1745260192.856:621): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/kwalletrc" pid=24602 comm="krdc"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[23340.957930] audit: type=1400 audit(1745260192.856:622): apparmor="DENIED"
operation="open" class="file" profile="snap.krdc.krdc"
name="/home/bonnaudl/.config/kwalletrc" pid=24602 comm="krdc"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
EXPECTED RESULT
No audit logs.
SOFTWARE/OS VERSIONS
$ kinfo
Operating System: Kubuntu 25.04
KDE Plasma Version: 6.3.4
KDE Frameworks Version: 6.12.0
Qt Version: 6.8.3
Kernel Version: 6.14.3-061403-generic (64-bit)
Graphics Platform: X11
--
You are receiving this mail because:
You are watching all bug changes.
