Ok, I've tried it with only this change to /etc/apparmor.d/fusermount3
and Flatpak is working:

root@cube:/etc/apparmor.d# diff fusermount3 ~/fusermount3 
11d10
<   /run/mount/utab.lock rwk,


The Logs are:

Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.690:299): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110534 comm="fusermount3" capability=1  capname="dac_override"
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.690:300): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110534 comm="fusermount3" capability=7  capname="setuid"
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.690:301): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110535 comm="fusermount3" capability=7  capname="setuid"
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.813:302): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110546 comm="fusermount3" capability=1  capname="dac_override"
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.813:303): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110546 comm="fusermount3" capability=7  capname="setuid"
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.813:304): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110547 comm="fusermount3" capability=7  capname="setuid"
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.814:305): 
apparmor="DENIED" operation="mknod" class="file" profile="fusermount3" 
name="/run/mount/utab.act" pid=110547 comm="umount" requested_mask="c" 
denied_mask="c" fsuid=0 ouid=0
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.814:306): 
apparmor="DENIED" operation="open" class="file" profile="fusermount3" 
name="/run/mount/utab" pid=110547 comm="umount" requested_mask="r" 
denied_mask="r" fsuid=0 ouid=0
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.814:307): 
apparmor="DENIED" operation="open" class="file" profile="fusermount3" 
name="/run/mount/utab.event" pid=110547 comm="umount" requested_mask="wc" 
denied_mask="wc" fsuid=0 ouid=0
Sep 27 07:45:38 cube kernel: audit: type=1400 audit(1758923138.936:308): 
apparmor="DENIED" operation="capable" class="cap" profile="fusermount3" 
pid=110557 comm="fusermount3" capability=1  capname="dac_override"

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2122161

Title:
  error: Failed to install org.gnome.Platform: Could not unmount
  revokefs-fuse filesystem at /var/tmp/flatpak-
  cache-4EB3B3/org.gnome.Platform-EM6KC3: Child process exited with code
  1

Status in apparmor package in Ubuntu:
  Confirmed
Status in flatpak package in Ubuntu:
  Confirmed

Bug description:
  hi i am a bug tester and wanted to install a program but then i got this error
  here is my full log:
  Warning: Could not unmount revokefs-fuse filesystem at 
/var/tmp/flatpak-cache-4EB3B3/org.freedesktop.Platform.GL.default-FAB3B3: Child 
process exited with code 1
  Warning: Could not unmount revokefs-fuse filesystem at 
/var/tmp/flatpak-cache-4EB3B3/org.freedesktop.Platform.GL.default-K8HAC3: Child 
process exited with code 1
  Warning: Could not unmount revokefs-fuse filesystem at 
/var/tmp/flatpak-cache-4EB3B3/org.freedesktop.Platform.openh264-D0P4B3: Child 
process exited with code 1
  Warning: Could not unmount revokefs-fuse filesystem at 
/var/tmp/flatpak-cache-4EB3B3/org.gnome.Platform.Locale-QP83B3: Child process 
exited with code 1
  Warning: Could not unmount revokefs-fuse filesystem at 
/var/tmp/flatpak-cache-4EB3B3/org.gtk.Gtk3theme.Yaru-dark-M2N7B3: Child process 
exited with code 1
  error: Failed to install org.gnome.Platform: Could not unmount revokefs-fuse 
filesystem at /var/tmp/flatpak-cache-4EB3B3/org.gnome.Platform-EM6KC3: Child 
process exited with code 1

  ProblemType: Bug
  DistroRelease: Ubuntu 25.10
  Package: flatpak 1.16.1-2ubuntu1
  ProcVersionSignature: Ubuntu 6.17.0-3.3-generic 6.17.0-rc3
  Uname: Linux 6.17.0-3-generic x86_64
  NonfreeKernelModules: zfs
  ApportVersion: 2.33.1-0ubuntu2
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Fri Sep  5 20:07:19 2025
  InstallationDate: Installed on 2025-09-04 (1 days ago)
  InstallationMedia: Ubuntu 25.10 "Questing Quokka" - Daily amd64 (20250903)
  ProcEnviron:
   LANG=en_US.UTF-8
   PATH=(custom, no user)
   SHELL=/bin/bash
   TERM=xterm-256color
   XDG_RUNTIME_DIR=<set>
  SourcePackage: flatpak
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2122161/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to