Still not working. Please help.

the audit logs when launching gajim are:

####################################

type=SYSCALL msg=audit(1521623303.636:86): arch=c000003e syscall=2
success=no exit=-13 a0=659281e35d38 a1=90800 a2=6592816e73f0
a3=659281e49000 items=1 ppid=1053 pid=1119 auid=1000 uid=0 gid=0 euid=0
suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gajim"
exe="/usr/bin/python3.6" key=(null)
type=CWD msg=audit(1521623303.636:86): cwd="/home/user"
type=PATH msg=audit(1521623303.636:86): item=0 name="/usr/lib/python3.6"
inode=19437 dev=00:17 mode=040755 ouid=0 ogid=0 rdev=00:00
nametype=NORMAL cap_fp=0000000000000000 cap_fi=0000000000000000 cap_fe=0
cap_fver=0
type=PROCTITLE msg=audit(1521623303.636:86):
proctitle=2F7573722F62696E2F707974686F6E002F7573722F62696E2F67616A696D
type=AVC msg=audit(1521623303.637:87): apparmor="ALLOWED"
operation="open" info="Failed name lookup - disconnected path" error=-13
profile="/usr/bin/gajim" name="usr/lib/python3.6/lib-dynload" pid=1119
comm="gajim" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=SYSCALL msg=audit(1521623303.637:87): arch=c000003e syscall=2
success=no exit=-13 a0=659281e424d0 a1=90800 a2=6592816e73f0
a3=659281e09000 items=1 ppid=1053 pid=1119 auid=1000 uid=0 gid=0 euid=0
suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="gajim"
exe="/usr/bin/python3.6" key=(null)
type=CWD msg=audit(1521623303.637:87): cwd="/home/user"
type=PATH msg=audit(1521623303.637:87): item=0
name="/usr/lib/python3.6/lib-dynload" inode=17086 dev=00:17 mode=040755
ouid=0 ogid=0 rdev=00:00 nametype=NORMAL cap_fp=0000000000000000
cap_fi=0000000000000000 cap_fe=0 cap_fver=0
type=PROCTITLE msg=audit(1521623303.637:87):
proctitle=2F7573722F62696E2F707974686F6E002F7573722F62696E2F67616A696D
type=ANOM_ABEND msg=audit(1521623303.637:88): auid=1000 uid=0 gid=0
ses=2 pid=1119 comm="gajim" exe="/usr/bin/python3.6" sig=6 res=1

####################################

The profile I used:

# Last Modified: Wed Mar 21 00:06:33 2018
#include <tunables/global>

/usr/bin/gajim flags=(complain) {
  #include <abstractions/base>
  #include <abstractions/lightdm>
  #include <abstractions/python>
  /** rwk,
  /home/user/** r,
  /home/user/.local/share/gajim/** rwk,
  /home/user/.cache/gajim/** rwk,
  /usr/lib/python3.6/** rk,
  /home/user/.local/lib/** rk,
  /proc/*/net/arp rk,
  owner "/home/*/.mozilla/firefox/Crash Reports/**" rk,
  owner /home/*/ rk,
  owner /home/*/.ICEauthority rk,
  owner /home/*/.Xauthority rk,
  owner /home/*/.cache/fontconfig/** rwk,
  owner /home/*/.cache/gajim/** rwk,
  owner /home/*/.config/** rwk,
  owner /home/*/.local/lib/python2.7/site-packages/ rk,
  owner /home/*/.local/lib/python3.6/site-packages/ rk,
  owner /home/*/.local/share/applications/ rk,
  owner /home/*/.local/share/gajim/* rwk,
  owner /home/*/.local/share/* rwk,
  owner /home/*/.mozilla/firefox/* rk,
  owner /proc/*/fd/ rk,
  owner /proc/*/mounts rk,

On 03/21/2018 02:40 AM, Seth Arnold wrote:
> Hello,
>
>  open("/home/user", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = -1 EACCES 
> (Permission denied)
> ...
>  open("/usr/lib/python3.6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = -1 
> EACCES (Permission denied)
> etc
>
> Probably these all generated DENIED lines in your logs.
>
> And probably running aa-logprof would prompt you about them. Allow them
> as appropriate and probably you'll be good to go.
>
> Thanks
>

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1757256

Title:
  Apparmor profile gajim

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1757256/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to