> No /var/log/audit* on my system, so looking in journalctl -fu
apparmor..

That means you don't have auditd running. It might be a good idea to
start it.


That said, obvious rules to add first:

owner @{HOME}/.remmina/ r,

/usr/bin/lsb_release Px -> lsb_release,

Reading /etc/debian_version and /etc/lsb-release might be a fallback
after not being able to execute lsb_release - I'm not sure if allowing
that makes sense (OTOH, if lsb-release isn't installed, that fallback
might also be used).

That leaves executing /usr/bin/python3.13 - depending on what it's used
for, either ix (inherit) or Cx (child profile) might make sense.

I'd recommend to put the profile into complain mode with   aa-complain
/etc/apparmor.d/remmina   so that things "only" get logged (see dmesg or
audit.log again - will be more verbose this time), but are allowed.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2102033

Title:
  remmina blocked by apparmor in Plucky

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2102033/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to