Just discovered on clean Debian Sid GNOME that totem needs to create .cache/totem on first ever run:
type=AVC msg=audit(1508956935.986:171): apparmor="DENIED" operation="mkdir" profile="/usr/bin/totem" name="/home/vincas/.cache/totem/" pid=2046 comm="totem" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000 type=SYSCALL msg=audit(1508956935.986:171): arch=c000003e syscall=83 success=no exit=-13 a0=563288769ed0 a1=1ed a2=563288769ee9 a3=33 items=0 ppid=1138 pid=2046 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=3 comm="totem" exe="/usr/bin/totem" key=(null) type=PROCTITLE msg=audit(1508956935.986:171): proctitle=2F7573722F62696E2F746F74656D002D2D676170706C69636174696F6E2D73657276696365 Could be usefull to add it in same MR. -- https://code.launchpad.net/~intrigeri/apparmor-profiles/+git/apparmor-profiles/+merge/332769 Your team AppArmor Developers is requested to review the proposed merge of ~intrigeri/apparmor-profiles/+git/apparmor-profiles:gnome-3.26 into apparmor-profiles:master. -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
