This bug was fixed in the package apparmor - 4.1.0~beta5-0ubuntu15
---------------
apparmor (4.1.0~beta5-0ubuntu15) questing; urgency=medium
* Add patch to allow unprivileged_userns access to root dir
(https://gitlab.com/apparmor/apparmor/-/issues/505):
- d/p/u/unprivileged_userns_rootdir.patch
* Add patch to fix lsblk accesses on IBM System Z systems (LP: #2107402)
and execution from a confined context (LP: #2107455):
- d/p/u/lsblk-s390-fixes.patch
* Add patch to fix execution of various commands from confined contexts
(https://gitlab.com/apparmor/apparmor/-/merge_requests/1637,
backport of the profile fixes and logprof test fix):
- d/p/u/profiles_ensure_access_to_attach_path.patch
* Add patch to include new QtWebEngineProcess execution path in
plasmashell profile (LP: #2107723):
- d/p/u/plasmashell-QtWebEngineProcess-new-path.patch
* Add patch to allow /cvmfs fusermounts
(https://gitlab.com/apparmor/apparmor/-/merge_requests/1587):
- d/p/u/fusermount3_cvmfs.patch
* Add patch to grant OpenVPN DNS accesses (LP: #2107596, LP: #2109029)
- d/p/u/openvpn_dnsfix.patch
* Add patch to expand allowed fusermount3 flags for fuse_overlayfs
(https://gitlab.com/apparmor/apparmor/-/merge_requests/1673)
- d/p/u/fusermount3_allow_more_flags.patch
* Add patch to fix permission denials for iotop-c (LP: #2107727):
- d/p/u/profiles-give-iotop-c-additional-accesses.patch
* Add patch to fix parser handling of norelatime mount flag
(https://gitlab.com/apparmor/apparmor/-/merge_requests/1679):
- d/p/u/parser-fix-handling-of-norelatime-mount-rule-flag.patch
* Add patch to fix incorrect mount rule documentation in the apparmor.d
man page (https://gitlab.com/apparmor/apparmor/-/merge_requests/1674):
- d/p/u/fix-incorrect-mount-flag-apparmor.d-docs.patch
- d/p/u/regression-verify-documented-mount-flag-behavior.patch
* d/p/u/remmina_mr_1348.patch, d/p/u/remmina-dbus-describeall.patch:
move the remmina profile to profiles/apparmor/profiles/extras to
disable it by default (LP: #2102033)
* debian/apparmor.install: remove the remmina profile entry
* debian/apparmor-profiles.install: add an entry for the remmina profile
* debian/apparmor.maintscript: remove the remmina profile upon upgrade
-- Ryan Lee <ryan....@canonical.com> Wed, 07 May 2025 11:29:02 -0700
** Changed in: apparmor (Ubuntu)
Status: New => Fix Released
** Bug watch added: gitlab.com/apparmor/apparmor/-/issues #505
https://gitlab.com/apparmor/apparmor/-/issues/505
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2107723
Title:
Using KDE Plasma widget "Web Browser" kill Plasma desktop due to
QtWebEngine and AppArmor restrictions
Status in apparmor package in Ubuntu:
Fix Released
Bug description:
KUBUNTU 25.04 Plucky
plasma-desktop 4:6.3.4-0ubuntu1
apparmor 4.1.0~beta5-0ubuntu14
Using KDE Plasma widget "Web Browser" kill Plasma desktop due to QtWebEngine
and AppArmor restrictions
Add an empty panel and click on "+ Add Widgets"
Search with browser -> click on "Web Browser" -> widget is add to panel ->
click on "Exit Edit Mode"
Click on icon "Web Browser" or logout/login.
After few seconds, Plasma desktop restart several time and finaly become a
black screen and never comeback !!
Logging :
plasmashell[6762]: LaunchProcess: failed to execvp:
plasmashell[6762]: /usr/lib/qt6/libexec/QtWebEngineProcess
kernel: audit: type=1400 audit(1745144377.735:211): apparmor="DENIED"
operation="exec" class="file" info="no new privs" error=-1
profile="plasmashell" name="/usr/lib/qt6/libexec/QtWebEngineProcess" pid=6762
comm="plasmashell" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
target="unconfined"
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2107723/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
