Public bug reported:
I can't view any image on my Stonking machine due glycing errors.
```
Loader process exited early with status '1'Command:
"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr"
"/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache"
"--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs"
"/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv"
"XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR"
"/run/user/1489920711" "--seccomp" "17"
"/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "16"
```
If I remove the AppArmor profiles related to bubble-wrap from
`/etc/apparmor.d/` and reload, then it works.
```
$ ls /etc/apparmor.d/*bwrap*
/etc/apparmor.d/bwrap-userns-restrict /etc/apparmor.d/glycin.bwrap
$ sudo rm -rf /etc/apparmor.d/*bwrap*
```
Reinstalling the package forcing those files to show up again brings the
failure back. An extract from my journal shows:
```
$ journalctl -b 0 -g "glycin" --no-pager
...
Sep 23 16:56:33 cn org.gnome.Loupe[587855]: 2026-09-23T19:56:33.388185Z ERROR
glycin::sandbox:804: Unable to list root directory (/) entries: Permission
denied (os error 13)
Sep 23 16:56:33 cn kernel: audit: type=1400 audit(1790193393.391:3722):
apparmor="DENIED" operation="mkdir" class="file" namespace="root//glycin"
profile="bwrap" name="/proc/" pid=587867 comm="bwrap" requested_mask="c"
denied_mask="c" fsuid=1489920711 ouid=1489920711
Sep 23 16:56:33 cn kernel: audit: type=1400 audit(1790193393.395:3726):
apparmor="DENIED" operation="mkdir" class="file" namespace="root//glycin"
profile="bwrap" name="/proc/" pid=587902 comm="bwrap" requested_mask="c"
denied_mask="c" fsuid=1489920711 ouid=1489920711
$ apt policy apparmor-profiles
apparmor-profiles:
Installed: 6.0.0~alpha1-0ubuntu1
Candidate: 6.0.0~alpha1-0ubuntu1
```
ProblemType: Bug
DistroRelease: Ubuntu 26.10
Package: apparmor-profiles 6.0.0~alpha1-0ubuntu1
ProcVersionSignature: Ubuntu 7.0.0-30.30-generic 7.0.12
Uname: Linux 7.0.0-30-generic x86_64
NonfreeKernelModules: zfs
ApportVersion: 2.36.0-0ubuntu1
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Wed Sep 23 16:56:51 2026
InstallationDate: Installed on 2025-04-06 (535 days ago)
InstallationMedia: Ubuntu 24.04.2 LTS "Noble Numbat" - Release amd64 (20250215)
PackageArchitecture: all
ProcEnviron:
LANG=en_US.UTF-8
PATH=(custom, no user)
SHELL=/usr/bin/zsh
TERM=screen-256color
XDG_RUNTIME_DIR=<set>
ProcKernelCmdline: BOOT_IMAGE=/vmlinuz-7.0.0-30-generic
root=/dev/mapper/ubuntu--vg-ubuntu--lv ro quiet splash pcie_aspm=on
crashkernel=2G-4G:320M,4G-32G:512M,32G-64G:1024M,64G-128G:2048M,128G-:4096M
SourcePackage: apparmor
UpgradeStatus: Upgraded to stonking on 2026-08-19 (35 days ago)
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug stonking wayland-session
** Summary changed:
- Can't view any image file due conflicting bwrap profiles denying access to
glycing
+ Can't view any image file due conflicting bwrap profiles denying access to
glycin
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2168285
Title:
Can't view any image file due conflicting bwrap profiles denying
access to glycin
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2168285/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
