This bug was fixed in the package apparmor - 5.0.0~alpha1-0ubuntu3

---------------
apparmor (5.0.0~alpha1-0ubuntu3) questing; urgency=medium

  * debian/apparmor.install, debian/apparmor-profiles.install,
    debian/apparmor.maintscript: disable the lsof profile by default
    as temporary workaround for LP #2120233

apparmor (5.0.0~alpha1-0ubuntu2) questing; urgency=medium

  * Add a patch to grant nss-systemd access to new GDM userdb service:
    (LP: #2119541)
    - d/p/u/nss-systemd-grant-access-to-gdb-user-db.patch
  * Add a patch to improve aa-notify command notification fallback:
    - d/p/u/aa-notify-fallback-to-ev-comm-when-ev-execpath.patch
  * Add patches to fix parser memory leaks:
    - d/p/u/parser-fix-misc-leaks.patch
    - d/p/u/parser-fix-more-parser-leaks.patch

 -- Ryan Lee <[email protected]>  Mon, 11 Aug 2025 09:38:19 -0700

** Changed in: apparmor (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2119541

Title:
  nss-systemd does not grant access to the GDM user database

Status in apparmor package in Ubuntu:
  Fix Released
Status in gdm3 package in Ubuntu:
  Won't Fix

Bug description:
  GDM 49~beta implements a userdb VarLink service for managing the unix users
  running the greeter shell, as well as the gnome-initial-setup users.

  Currently it is broken because apparmor prevents access to it.

  gdm-launch-environment][1892]: Gdm: GdmSessionWorker: determining if 
authenticated user (password required:0) is authorized to session
  unix_chkpwd[1897]: could not obtain user info (gdm-greeter)
  kernel: audit: type=1400 audit(1754399331.488:211): apparmor="DENIED" 
operation="connect" class="file" profile="unix-chkpwd" 
name="/run/systemd/userdb/org.gnome.DisplayManager" pid=1897 comm="unix_chkpwd" 
requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
  gdm-launch-environment][1892]: Gdm: GdmSessionWorker: user is not authorized 
to log in: Authentication failure

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2119541/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to