curiosityseeker
curiosityseeker
Submit Form Get your issue resolved quickly! Fill in the form accurately. **Lists in use:** - [ ] mini - [ ] Lite - [ ] Pro - [x] Xtra...
After every reboot I get the following output from `aa-log`: `ALLOWED startplasma link owner @{user_cache_dirs}/ksycoca5_de_LQ6f0J2qZg4vOKgw2NbXuW7iuVU -> @{user_cache_dirs}/#@{int} comm=startplasma-way requested_mask=k denied_mask=k` And consequently, `aa-log -r` reports: ``` profile startplasma { owner...
For various profiles, e.g, `pacman` or `lscpu` I permanently get the output from `aa-log` that in those profiles `unix (receive) type=stream,` is required - although I added that rule to...
Thanks a lot for providing your AppArmor profiles! One question: The Firefox profile says in lines 48-49: ``` # Must be px to avoid env scrubbing for LD_PRELOAD libEGL.so, libmozsandbox.so...
I've noticed that `brave-sandbox` or `chrome-sandbox` never shows up in `aa-status` among the processes in complain or enforce mode here on my Arch system. Neither in `ps auxZ`. This is...
In the past `ghostscript` has been affected by [multiple vulnerabilities](https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ghostscript). So far it seems only be covered by the rule `@{lib}/ghostscript/** mr,` in the `cups-backend-pdf` profile. I found [this](https://build.opensuse.org/projects/Printing/packages/ghostscript/files/apparmor_ghostscript) profile...
After starting signal-desktop I get the following errors: ``` profile signal-desktop { /bin/xdg-mime ix -> xdg-mime, # no new privs no new privs } profile xdg-settings { @{bin}/xdg-mime r, /bin/xdg-mime...
See the detailed discussion on https://github.com/Antiz96/arch-update/issues/410. While [tracer](https://archlinux.org/packages/extra/any/tracer/) and [longoverdue](https://aur.archlinux.org/packages/longoverdue) output the _user_ services that should be restarted after an update, `checkservices` does not, even when started with the `-u`...
Defining the user_dirs_strict variable as discussed in https://github.com/roddhjav/apparmor.d/pull/849
Today I noticed that the output from `aa-log` is inconsistent with the one from `aa-log -r` and `aa-log -R`. I started `systemsettings` and got the following from `aa-log`: ``` ALLOWED...