On Mon, 2018-01-22 at 21:20 +0200, Vincas Dargis wrote:
> Package: nvidia-driver
> Severity: normal
> 
> Dear Maintainer,
> 
> Some appliactions that has AppArmor profile defined produces DENIED
> log
> entries for strange `/home/vincas.nv/` paths:
> 
> ```
> type=AVC msg=audit(1516647002.968:744): apparmor="DENIED"
> operation="mkdir" profile="thunderbird" name="/home/vincas.nv/"
> pid=23705 comm="thunderbird" requested_mask="c" denied_mask="c"
> fsuid=1000 ouid=1000
> type=SYSCALL msg=audit(1516647002.968:744): arch=c000003e syscall=83
> success=no exit=-13 a0=7f81fc94ac20 a1=1ff a2=1 a3=1 items=0
> ppid=23694
> pid=23705 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000
> egid=1000 sgid=1000 fsgid=1000 tty=pts2 ses=4 comm="thunderbird"
> exe="/usr/lib/thunderbird/thunderbird-bin" key=(null)

Can't say I understand how Apparmor works, but don't those logs suggest
that it's Thunderbird doing this?

-- 
Kind regards,
Luca Boccassi

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to