Public bug reported: Attempting to pick a file to upload fails with various snapped apps: firefox, chrome, etc.
Related to this, xdg-document-portal.service is in a failed state. It looks like an apparmor rule is denying fusermount3. This is on a fresh install of plucky[3]. [1] ~ $ systemctl --user status xdg-document-portal.service × xdg-document-portal.service - flatpak document portal service Loaded: loaded (/usr/lib/systemd/user/xdg-document-portal.service; static) Active: failed (Result: exit-code) since Thu 2025-10-23 10:03:00 MDT; 1min 45s ago Duration: 5ms Invocation: b9f3672d2bbf4eff9e9b41c1485c00c9 Process: 10576 ExecStart=/usr/libexec/xdg-document-portal (code=exited, status=6) Main PID: 10576 (code=exited, status=6) Mem peak: 3.1M CPU: 14ms Oct 23 10:03:00 fir systemd[5486]: Starting xdg-document-portal.service - flatpak document portal service... Oct 23 10:03:00 fir systemd[5486]: Started xdg-document-portal.service - flatpak document portal service. Oct 23 10:03:00 fir xdg-document-portal[10588]: fusermount3: could not determine username Oct 23 10:03:00 fir xdg-document-portal[10576]: error: fuse init failed: Can't mount path /run/user/1421003313/doc Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Main process exited, code=exited, status=6/NOTCONFIGURED Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Failed with result 'exit-code'. [2] [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.410:548): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6054 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.412:549): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6055 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] rfkill: input handler enabled [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.715:550): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6209 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.717:551): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6211 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [3] ~ $ cat /etc/os-release PRETTY_NAME="Ubuntu 25.04" NAME="Ubuntu" VERSION_ID="25.04" VERSION="25.04 (Plucky Puffin)" VERSION_CODENAME=plucky ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/"; SUPPORT_URL="https://help.ubuntu.com/"; BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"; PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"; UBUNTU_CODENAME=plucky LOGO=ubuntu-logo ** Affects: apparmor Importance: Undecided Status: New ** Affects: apparmor (Ubuntu) Importance: Undecided Status: New ** Description changed: Attempting to pick a file to upload fails with various snapped apps: firefox, chrome, etc. - Related to this, xdg-document-portal.service is in a failed state. It - looks like an apparmor rule is denying fusermount3. - + Related to this, xdg-document-portal.service is in a failed state[1]. It + looks like an apparmor rule is denying fusermount3[2]. [1] ~ $ systemctl --user status xdg-document-portal.service × xdg-document-portal.service - flatpak document portal service - Loaded: loaded (/usr/lib/systemd/user/xdg-document-portal.service; static) - Active: failed (Result: exit-code) since Thu 2025-10-23 10:03:00 MDT; 1min 45s ago - Duration: 5ms - Invocation: b9f3672d2bbf4eff9e9b41c1485c00c9 - Process: 10576 ExecStart=/usr/libexec/xdg-document-portal (code=exited, status=6) - Main PID: 10576 (code=exited, status=6) - Mem peak: 3.1M - CPU: 14ms + Loaded: loaded (/usr/lib/systemd/user/xdg-document-portal.service; static) + Active: failed (Result: exit-code) since Thu 2025-10-23 10:03:00 MDT; 1min 45s ago + Duration: 5ms + Invocation: b9f3672d2bbf4eff9e9b41c1485c00c9 + Process: 10576 ExecStart=/usr/libexec/xdg-document-portal (code=exited, status=6) + Main PID: 10576 (code=exited, status=6) + Mem peak: 3.1M + CPU: 14ms Oct 23 10:03:00 fir systemd[5486]: Starting xdg-document-portal.service - flatpak document portal service... Oct 23 10:03:00 fir systemd[5486]: Started xdg-document-portal.service - flatpak document portal service. Oct 23 10:03:00 fir xdg-document-portal[10588]: fusermount3: could not determine username Oct 23 10:03:00 fir xdg-document-portal[10576]: error: fuse init failed: Can't mount path /run/user/1421003313/doc Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Main process exited, code=exited, status=6/NOTCONFIGURED Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Failed with result 'exit-code'. [2] [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.410:548): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6054 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.412:549): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6055 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] rfkill: input handler enabled [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.715:550): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6209 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.717:551): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6211 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 ** Description changed: Attempting to pick a file to upload fails with various snapped apps: firefox, chrome, etc. - Related to this, xdg-document-portal.service is in a failed state[1]. It - looks like an apparmor rule is denying fusermount3[2]. + Related to this, xdg-document-portal.service is in a failed state. It + looks like an apparmor rule is denying fusermount3. + + This is on a fresh install of plucky[3]. [1] ~ $ systemctl --user status xdg-document-portal.service × xdg-document-portal.service - flatpak document portal service Loaded: loaded (/usr/lib/systemd/user/xdg-document-portal.service; static) Active: failed (Result: exit-code) since Thu 2025-10-23 10:03:00 MDT; 1min 45s ago Duration: 5ms Invocation: b9f3672d2bbf4eff9e9b41c1485c00c9 Process: 10576 ExecStart=/usr/libexec/xdg-document-portal (code=exited, status=6) Main PID: 10576 (code=exited, status=6) Mem peak: 3.1M CPU: 14ms Oct 23 10:03:00 fir systemd[5486]: Starting xdg-document-portal.service - flatpak document portal service... Oct 23 10:03:00 fir systemd[5486]: Started xdg-document-portal.service - flatpak document portal service. Oct 23 10:03:00 fir xdg-document-portal[10588]: fusermount3: could not determine username Oct 23 10:03:00 fir xdg-document-portal[10576]: error: fuse init failed: Can't mount path /run/user/1421003313/doc Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Main process exited, code=exited, status=6/NOTCONFIGURED Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Failed with result 'exit-code'. [2] [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.410:548): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6054 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.412:549): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6055 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] rfkill: input handler enabled [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.715:550): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6209 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.717:551): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6211 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 + + [3] + ~ $ cat /etc/os-release + PRETTY_NAME="Ubuntu 25.04" + NAME="Ubuntu" + VERSION_ID="25.04" + VERSION="25.04 (Plucky Puffin)" + VERSION_CODENAME=plucky + ID=ubuntu + ID_LIKE=debian + HOME_URL="https://www.ubuntu.com/"; + SUPPORT_URL="https://help.ubuntu.com/"; + BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"; + PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"; + UBUNTU_CODENAME=plucky + LOGO=ubuntu-logo ** Also affects: apparmor (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/2129704 Title: file picker broken due to apparmor blocking fusermount3 Status in AppArmor: New Status in apparmor package in Ubuntu: New Bug description: Attempting to pick a file to upload fails with various snapped apps: firefox, chrome, etc. Related to this, xdg-document-portal.service is in a failed state. It looks like an apparmor rule is denying fusermount3. This is on a fresh install of plucky[3]. [1] ~ $ systemctl --user status xdg-document-portal.service × xdg-document-portal.service - flatpak document portal service Loaded: loaded (/usr/lib/systemd/user/xdg-document-portal.service; static) Active: failed (Result: exit-code) since Thu 2025-10-23 10:03:00 MDT; 1min 45s ago Duration: 5ms Invocation: b9f3672d2bbf4eff9e9b41c1485c00c9 Process: 10576 ExecStart=/usr/libexec/xdg-document-portal (code=exited, status=6) Main PID: 10576 (code=exited, status=6) Mem peak: 3.1M CPU: 14ms Oct 23 10:03:00 fir systemd[5486]: Starting xdg-document-portal.service - flatpak document portal service... Oct 23 10:03:00 fir systemd[5486]: Started xdg-document-portal.service - flatpak document portal service. Oct 23 10:03:00 fir xdg-document-portal[10588]: fusermount3: could not determine username Oct 23 10:03:00 fir xdg-document-portal[10576]: error: fuse init failed: Can't mount path /run/user/1421003313/doc Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Main process exited, code=exited, status=6/NOTCONFIGURED Oct 23 10:03:00 fir systemd[5486]: xdg-document-portal.service: Failed with result 'exit-code'. [2] [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.410:548): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6054 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.412:549): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6055 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] rfkill: input handler enabled [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.715:550): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6209 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [Thu Oct 23 10:44:49 2025] audit: type=1400 audit(1761237889.717:551): apparmor="DENIED" operation="connect" class="file" profile="fusermount3" name="/run/authd.sock" pid=6211 comm="fusermount3" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0 [3] ~ $ cat /etc/os-release PRETTY_NAME="Ubuntu 25.04" NAME="Ubuntu" VERSION_ID="25.04" VERSION="25.04 (Plucky Puffin)" VERSION_CODENAME=plucky ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/"; SUPPORT_URL="https://help.ubuntu.com/"; BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"; PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"; UBUNTU_CODENAME=plucky LOGO=ubuntu-logo To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/2129704/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
