In addition to the above, we need to: * add to apparmor's abstractions/private-files-strict # don't allow access to any gnome-keyring modules audit deny /{,var/}run/user/[0-9]*/keyring** mrwkl,
* add to apparmor's abstractions/p11-kit: # gnome-keyring pkcs11 module owner /{,var/}run/user/[0-9]*/keyring*/pkcs11 rw,
Adding this will allow telepathy and evince to work with the kernel change.
In addition to the above, we need to: private- files-strict }run/user/ [0-9]*/ keyring* * mrwkl,
* add to apparmor's abstractions/
# don't allow access to any gnome-keyring modules
audit deny /{,var/
* add to apparmor's abstractions/ p11-kit: }run/user/ [0-9]*/ keyring* /pkcs11 rw,
# gnome-keyring pkcs11 module
owner /{,var/
Adding this will allow telepathy and evince to work with the kernel change.