severity 887593 minor block 886548 by 887953 thanks On Thu, Jan 18, 2018 at 11:29:19AM +0100, Félix Sipma wrote: > I get a lot of warnings in my logs concerning libreoffice and apparmor. They > appear as ALLOWED, but that would mean they would be DENIED if apparmor was > enabled.
Which is the reason it's in complain mode :) > Jan 18 11:09:25 laptop audit[21088]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-oopslash" > name="/run/user/1000/X11/Xauthority" pid=21088 comm="oosplash" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.099:85): > apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" > name="/run/user/1000/X11/Xauthority" pid=21088 comm="oosplash" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 > Jan 18 11:09:25 laptop audit[21088]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-oopslash" > name="/sys/devices/virtual/block/dm-0/queue/rotational" pid=21088 > comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.107:86): > apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" > name="/sys/devices/virtual/block/dm-0/queue/rotational" pid=21088 > comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:87): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:88): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:89): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:90): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:91): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.355:92): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.355:93): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.355:94): > apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_device" pid=21106 > comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:25 laptop audit[21105]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/home/gueux/.config/X11/XCompose" pid=21105 comm="soffice.bin" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 X stuff.... > Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/home/gueux/.mozilla/firefox/profiles.ini" pid=21105 comm="soffice.bin" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 > Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/home/gueux/.mozilla/firefox/g5to00w2.default-1471855693129/secmod.db" > pid=21105 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=1000 > Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/home/gueux/.mozilla/firefox/g5to00w2.default-1471855693129/cert8.db" > pid=21105 comm="soffice.bin" requested_mask="wr" denied_mask="wr" fsuid=1000 > ouid=1000 > Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice" > name="/home/gueux/.mozilla/firefox/g5to00w2.default-1471855693129/key3.db" > pid=21105 comm="soffice.bin" requested_mask="wr" denied_mask="wr" fsuid=1000 > ouid=1000 Here it gets interesting. That's for digital signing with X.509. The certificates are supposed to come from mozilla... > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="exec" profile="libreoffice-soffice" name="/usr/bin/gpg" pid=21125 > comm="soffice.bin" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 > target="libreoffice-soffice//null-/usr/bin/gpg" > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_inherit" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/dev/null" pid=21125 comm="gpg" requested_mask="wr" denied_mask="wr" > fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/bin/gpg" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" > fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/ld-2.26.so" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/etc/ld.so.preload" pid=21125 comm="gpg" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/etc/ld.so.cache" pid=21125 comm="gpg" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libz.so.1.2.8" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libz.so.1.2.8" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libm-2.26.so" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libm-2.26.so" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libpthread-2.26.so" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libpthread-2.26.so" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libdl-2.26.so" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libdl-2.26.so" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21125 comm="gpg" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21125 comm="gpg" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/usr/lib/locale/locale-archive" pid=21125 comm="gpg" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/home/gueux/.gnupg/gpg.conf" pid=21125 comm="gpg" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=1000 > Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" > name="/etc/locale.alias" pid=21125 comm="gpg" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="exec" profile="libreoffice-soffice" name="/usr/bin/gpgsm" > pid=21127 comm="soffice.bin" requested_mask="x" denied_mask="x" fsuid=1000 > ouid=0 target="libreoffice-soffice//null-/usr/bin/gpgsm" > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_inherit" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/dev/null" pid=21127 comm="gpgsm" requested_mask="wr" denied_mask="wr" > fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/bin/gpgsm" pid=21127 comm="gpgsm" requested_mask="rm" > denied_mask="rm" fsuid=1000 ouid=0 gpg and gpg list/stuff gpg uses for digital signing/encryption with gpg... Did already add gpgconf when I saw that one in the logs, but... I wasn't aware one needs to allow locale stuff here explicitely too... > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/ld-2.26.so" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/etc/ld.so.preload" pid=21127 comm="gpgsm" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/etc/ld.so.cache" pid=21127 comm="gpgsm" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 ... or the linker ... > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 .. or openssl used by gpg ... > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libksba.so.8.11.6" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libksba.so.8.11.6" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21127 > comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21127 > comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21127 comm="gpgsm" > requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/usr/lib/locale/locale-archive" pid=21127 comm="gpgsm" > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" > operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" > name="/etc/locale.alias" pid=21127 comm="gpgsm" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 More gpg binaries/libs and locale stuff.... Regards, Rene