[arch-general] AppArmor

newer
[arch-general] headless box audio...

older
[arch-general] VLAN config works...

Frank Zimmermann

27 Jan 2022 27 Jan '22

11:37 a.m.

Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank

Show replies by thread

Anton Hvornum

27 Jan 27 Jan

12:30 p.m.

Perhaps unrelated, but you could try to increase verbosity of journalctl: `systemctl log-level` to show the current level. `systemctl log-level debug` to increase it system wide. `sudo ournalctl -f` should now show a lot more. Hopefully things you previously didn't see. This is a "catch all" attempt. And there's guaranteed a better way to debug this. Hopefully someone chimes in :) Best of luck! On Thu, 27 Jan 2022, 12:37 Frank Zimmermann via arch-general, < arch-general@lists.archlinux.org> wrote:

...

Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank

Paul Schaefer

12:55 p.m.

To quickly return to a working state, you can try to disable AppArmor using `aa-teardown`. If you want to dig deeper and want to inspect what is going wrong, you can use `aa-logprof` to interactively go through AppArmor blocks. Cheers Paul

Frank

2:28 p.m.

Hm, strange. I left for about 2 hrs and the system was frozen. So did a hard reset (I rebooted before multiple time to check if what I did worked). So it looks things are ok now, but I find some strange error messages in my journal: 15:19:32 systemd: Failed to start Sound Service. 15:19:32 systemd: Failed to start Sound Service. 15:18:47 systemd: Failed to start System Suspend. 15:18:47 kernel: Failed to put system to sleep. System resumed again: Device or resource busy 15:18:47 kernel: Freezing of tasks failed after 20.007 seconds (54 tasks refusing to freeze, wq_busy=0): 15:17:20 systemd: Failed to start RealtimeKit Scheduling Policy Service. Frank Am Donnerstag, dem 27.01.2022 um 13:30 +0100 schrieb Anton Hvornum:

...

Perhaps unrelated, but you could try to increase verbosity of journalctl:

`systemctl log-level` to show the current level. `systemctl log-level debug` to increase it system wide.

`sudo ournalctl -f` should now show a lot more. Hopefully things you previously didn't see.

This is a "catch all" attempt. And there's guaranteed a better way to debug this. Hopefully someone chimes in :)

Best of luck!

On Thu, 27 Jan 2022, 12:37 Frank Zimmermann via arch-general, wrote:

...
Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank

adventurer

28 Jan 28 Jan

1:35 p.m.

Hm, AppArmor doesn't come with a Firefox profile by default (neither with an Evolution profile). So how did you confine those applications? Did you copy the profiles from /usr/share/apparmor/extra-profiles to /etc/apparmor.d or do you use profiles from some github repository? Either way, it's probably necessary to add rules via aa-logprof and/or set the profiles into complain mode. For details see https://wiki.archlinux.org/title/AppArmor#Auditing_and_generating_profiles On Thu, 27 Jan 2022 12:37:43 +0100, Frank Zimmermann via arch-general wrote:

...

Oh der I made a mess. Wanted to setup Apparmor and Firefox and Evolution aren't working anymore. The programs are starting but without an UI. Even when I undo things this behaviour retains. I don't see anything in the journal and now don't know where to look for what's going wrong. Frank

812

Age (days ago)

813

Last active (days ago)

List overview

Download

4 comments

5 participants

participants (5)

adventurer
Anton Hvornum
Frank
Frank Zimmermann
Paul Schaefer