[arch-general] AppArmor
Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank
Perhaps unrelated, but you could try to increase verbosity of journalctl:
`systemctl log-level` to show the current level. `systemctl log-level debug` to increase it system wide.
`sudo ournalctl -f` should now show a lot more. Hopefully things you previously didn't see.
This is a "catch all" attempt. And there's guaranteed a better way to debug this. Hopefully someone chimes in :)
Best of luck!
On Thu, 27 Jan 2022, 12:37 Frank Zimmermann via arch-general, < arch-general@lists.archlinux.org> wrote:
Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank
Hm, strange. I left for about 2 hrs and the system was frozen. So did a hard reset (I rebooted before multiple time to check if what I did worked). So it looks things are ok now, but I find some strange error messages in my journal:
15:19:32 systemd: Failed to start Sound Service. 15:19:32 systemd: Failed to start Sound Service. 15:18:47 systemd: Failed to start System Suspend. 15:18:47 kernel: Failed to put system to sleep. System resumed again: Device or resource busy 15:18:47 kernel: Freezing of tasks failed after 20.007 seconds (54 tasks refusing to freeze, wq_busy=0): 15:17:20 systemd: Failed to start RealtimeKit Scheduling Policy Service.
Frank Am Donnerstag, dem 27.01.2022 um 13:30 +0100 schrieb Anton Hvornum:
Perhaps unrelated, but you could try to increase verbosity of journalctl:
`systemctl log-level` to show the current level. `systemctl log-level debug` to increase it system wide.
`sudo ournalctl -f` should now show a lot more. Hopefully things you previously didn't see.
This is a "catch all" attempt. And there's guaranteed a better way to debug this. Hopefully someone chimes in :)
Best of luck!
On Thu, 27 Jan 2022, 12:37 Frank Zimmermann via arch-general, arch-general@lists.archlinux.org wrote:
Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank
To quickly return to a working state, you can try to disable AppArmor using `aa-teardown`. If you want to dig deeper and want to inspect what is going wrong, you can use `aa-logprof` to interactively go through AppArmor blocks.
Cheers Paul
Hm, AppArmor doesn't come with a Firefox profile by default (neither with an Evolution profile). So how did you confine those applications? Did you copy the profiles from /usr/share/apparmor/extra-profiles to /etc/apparmor.d or do you use profiles from some github repository? Either way, it's probably necessary to add rules via aa-logprof and/or set the profiles into complain mode.
For details see https://wiki.archlinux.org/title/AppArmor#Auditing_and_generating_profiles
On Thu, 27 Jan 2022 12:37:43 +0100, Frank Zimmermann via arch-general arch-general@lists.archlinux.org wrote:
Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank
participants (5)
-
adventurer
-
Anton Hvornum
-
Frank
-
Frank Zimmermann
-
Paul Schaefer