Package: ejabberd
Version: 24.12-2
Severity: important
My apparmor service was breaking just now after an unstable
upgrade due to ejabberd it seems:
---
# systemctl status apparmor.service
× apparmor.service - Load AppArmor profiles
Loaded: loaded (/usr/lib/systemd/system/apparmor.service; enabled; preset:
enabled)
Active: failed (Result: exit-code) since Fri 2025-03-14 11:19:55 PDT; 3min
36s ago
Invocation: da1d076348064bab8de71653da20c45c
Docs: man:apparmor(7)
https://gitlab.com/apparmor/apparmor/wikis/home/
Process: 117596 ExecStart=/lib/apparmor/apparmor.systemd reload
(code=exited, status=1/FAILURE)
Main PID: 117596 (code=exited, status=1/FAILURE)
Mem peak: 5.8M
CPU: 265ms
Mar 14 11:19:55 king.bitgnome.net systemd[1]: Starting apparmor.service - Load
AppArmor profiles...
Mar 14 11:19:55 king.bitgnome.net apparmor.systemd[117596]: Restarting AppArmor
Mar 14 11:19:55 king.bitgnome.net apparmor.systemd[117596]: Reloading AppArmor
profiles
Mar 14 11:19:55 king.bitgnome.net apparmor.systemd[117699]: profile has merged
rule with conflicting x modifiers
Mar 14 11:19:55 king.bitgnome.net apparmor.systemd[117699]: ERROR processing
regexs for profile su, failed to load
Mar 14 11:19:55 king.bitgnome.net apparmor.systemd[117596]: Error: At least one
profile failed to load
Mar 14 11:19:55 king.bitgnome.net systemd[1]: apparmor.service: Main process
exited, code=exited, status=1/FAILURE
Mar 14 11:19:55 king.bitgnome.net systemd[1]: apparmor.service: Failed with
result 'exit-code'.
Mar 14 11:19:55 king.bitgnome.net systemd[1]: Failed to start apparmor.service
- Load AppArmor profiles.
# cd /etc/apparmor.d; grep -r 'su '
usr.sbin.ejabberdctl: profile su flags=(attach_disconnected) {
---
After removing ejabberd entirely, apparmor was happy again. I
figured I'd at least report this since the number of folks actively
running ejabberd at this point is probably fairly small.
-- System Information:
Debian Release: trixie/sid
APT prefers testing
APT policy: (700, 'testing'), (600, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.17-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE,
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages ejabberd depends on:
ii adduser 3.137
ii debconf [debconf-2.0] 1.5.89
ii erlang-asn1 1:27.2.4+dfsg-1
ii erlang-base [erlang-abi] 1:27.2.4+dfsg-1
ii erlang-base64url 1.0.1-8+b1
ii erlang-crypto 1:27.2.4+dfsg-1
ii erlang-goldrush 0.2.0-9+b1
ii erlang-idna 6.1.1-5+b1
ii erlang-inets 1:27.2.4+dfsg-1
ii erlang-jiffy 1.1.2-1+b1
ii erlang-jose 1.11.10-1+b1
ii erlang-lager 3.9.2-3+b1
ii erlang-mnesia 1:27.2.4+dfsg-1
ii erlang-odbc 1:27.2.4+dfsg-1
ii erlang-os-mon 1:27.2.4+dfsg-1
ii erlang-p1-acme 1.0.25-1
ii erlang-p1-cache-tab 1.0.31-2
ii erlang-p1-eimp 1.0.23-4
ii erlang-p1-mqtree 1.0.17-2
ii erlang-p1-pkix 1.0.10-2
ii erlang-p1-stringprep 1.0.30-2
ii erlang-p1-stun 1.2.15-1
ii erlang-p1-tls 1.1.22-1
ii erlang-p1-utils 1.0.26-2
ii erlang-p1-xml 1.1.55-1
ii erlang-p1-xmpp 1.9.4-1
ii erlang-p1-yaml 1.0.37-2
ii erlang-p1-yconf 1.0.17-1
ii erlang-p1-zlib 1.0.13-2
ii erlang-public-key 1:27.2.4+dfsg-1
ii erlang-ssl 1:27.2.4+dfsg-1
ii erlang-syntax-tools 1:27.2.4+dfsg-1
ii erlang-unicode-util-compat 0.7.0-5+b1
ii erlang-xmerl 1:27.2.4+dfsg-1
ii init-system-helpers 1.68
ii openssl 3.4.1-1
ii ucf 3.0050
ejabberd recommends no packages.
Versions of packages ejabberd suggests:
ii apparmor 4.1.0~beta5-3
ii apparmor-utils 4.1.0~beta5-3
pn ejabberd-contrib <none>
pn erlang-luerl <none>
pn erlang-p1-mysql <none>
pn erlang-p1-oauth2 <none>
pn erlang-p1-pam <none>
pn erlang-p1-pgsql <none>
pn erlang-p1-sip <none>
pn erlang-p1-sqlite3 <none>
pn erlang-redis-client <none>
pn imagemagick <none>
pn libunix-syslog-perl <none>
pn yamllint <none>
