Public bug reported:
Kubuntu: 26.04
Kernel: 7.0.5-070005-generic
apparmor: 5.0.0~beta1-0ubuntu7
rust-coreutils: 0.8.0-0ubuntu3
The AppArmor profile at /etc/apparmor.d/who confines the uutils `who`
binary but does not grant read access to its Fluent locale files,
which uutils installs under /usr/share/coreutils/locales/.
Every invocation of `who` produces denials such as:
apparmor="DENIED" operation="open" profile="who" \
name="/usr/share/coreutils/locales/who/es-ES.ftl" \
comm="who" requested_mask="r" denied_mask="r"
(plus uucore/en-US.ftl and uucore/es-ES.ftl)
Reproduce:
who
dmesg | grep 'profile="who"'
Expected: no denials; `who` reads its localized messages.
Actual: 3 denial lines per invocation; falls back silently.
Suggested fix — add to the profile (or ship as default local override):
/usr/share/coreutils/locales/** r,
Workaround confirmed working:
echo '/usr/share/coreutils/locales/** r,' \
| sudo tee /etc/apparmor.d/local/who
sudo apparmor_parser -r /etc/apparmor.d/who
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Tags: apparmor coreutils who
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2152159
Title:
"who" AppArmor profile denies access to uutils Fluent locale files
under /usr/share/coreutils/locales/
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2152159/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
