Ubuntu
apparmor package

apparmor denies VLC to open files in devmode

Bug #1766628 reported by Konstantin Pavlov on 2018-04-24

This bug affects 2 people

Affects		Status	Importance	Assigned to	Milestone
	apparmor (Ubuntu)	Invalid	Undecided	Unassigned

Bug Description

I see failures in VLC trying to open files and prefs while VLC snap seemingly uses devmode since this is on Debian "testing".

Failures:
^[[1;3CApr 24 17:50:24 coal kernel: [ 7997.906298] audit: type=1400 audit(1524581424.694:1944): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/#268898190" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:24 coal kernel: [ 7997.906308] audit: type=1400 audit(1524581424.694:1945): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/user-places.xbel.tbcache" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.local/share/#268898190"
Apr 24 17:50:24 coal kernel: [ 7997.912113] audit: type=1400 audit(1524581424.698:1946): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/#268898190" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:24 coal kernel: [ 7997.912122] audit: type=1400 audit(1524581424.698:1947): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/user-places.xbel" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.local/share/#268898190"
Apr 24 17:50:28 coal kernel: [ 8001.418173] audit: type=1400 audit(1524581428.206:1948): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/#268898190" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.418180] audit: type=1400 audit(1524581428.206:1949): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/user-places.xbel.tbcache" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.local/share/#268898190"
Apr 24 17:50:28 coal kernel: [ 8001.422473] audit: type=1400 audit(1524581428.210:1950): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/#268898190" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.422481] audit: type=1400 audit(1524581428.210:1951): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.local/share/user-places.xbel" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.local/share/#268898190"
Apr 24 17:50:28 coal kernel: [ 8001.556305] audit: type=1400 audit(1524581428.342:1952): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556318] audit: type=1400 audit(1524581428.342:1953): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcxkYxzT.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556324] audit: type=1400 audit(1524581428.342:1954): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556332] audit: type=1400 audit(1524581428.342:1955): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcbTrpmK.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556338] audit: type=1400 audit(1524581428.342:1956): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556351] audit: type=1400 audit(1524581428.342:1957): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcoPwDkW.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556359] audit: type=1400 audit(1524581428.342:1958): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556366] audit: type=1400 audit(1524581428.342:1959): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcNEfoeU.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556372] audit: type=1400 audit(1524581428.342:1960): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556384] audit: type=1400 audit(1524581428.342:1961): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcNqHFRZ.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556422] audit: type=1400 audit(1524581428.342:1962): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556426] audit: type=1400 audit(1524581428.342:1963): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcxAmRFn.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556429] audit: type=1400 audit(1524581428.342:1964): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556431] audit: type=1400 audit(1524581428.342:1965): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcnLySpy.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556434] audit: type=1400 audit(1524581428.342:1966): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556436] audit: type=1400 audit(1524581428.342:1967): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlckdgOTC.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556440] audit: type=1400 audit(1524581428.342:1968): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556444] audit: type=1400 audit(1524581428.342:1969): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcYqmhzt.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556447] audit: type=1400 audit(1524581428.342:1970): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556449] audit: type=1400 audit(1524581428.342:1971): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcRnUFmq.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556453] audit: type=1400 audit(1524581428.342:1972): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556458] audit: type=1400 audit(1524581428.342:1973): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcvgRWtN.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556464] audit: type=1400 audit(1524581428.342:1974): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556469] audit: type=1400 audit(1524581428.342:1975): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcKgIxLo.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556474] audit: type=1400 audit(1524581428.342:1976): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556478] audit: type=1400 audit(1524581428.342:1977): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcRJNbLX.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556482] audit: type=1400 audit(1524581428.342:1978): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556486] audit: type=1400 audit(1524581428.342:1979): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcfKhpDX.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556489] audit: type=1400 audit(1524581428.342:1980): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556495] audit: type=1400 audit(1524581428.342:1981): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcgDPluR.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.556501] audit: type=1400 audit(1524581428.342:1982): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#511744" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.556506] audit: type=1400 audit(1524581428.342:1983): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcxQbxwM.1.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#511744"
Apr 24 17:50:28 coal kernel: [ 8001.700064] audit: type=1400 audit(1524581428.486:1984): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.700066] audit: type=1400 audit(1524581428.486:1985): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:28 coal kernel: [ 8001.830048] audit: type=1400 audit(1524581428.618:1986): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.830050] audit: type=1400 audit(1524581428.618:1987): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:28 coal kernel: [ 8001.949117] audit: type=1400 audit(1524581428.734:1988): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8001.949119] audit: type=1400 audit(1524581428.734:1989): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:28 coal kernel: [ 8002.068593] audit: type=1400 audit(1524581428.854:1990): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.068596] audit: type=1400 audit(1524581428.854:1991): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:28 coal kernel: [ 8002.157919] audit: type=1400 audit(1524581428.942:1992): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.157929] audit: type=1400 audit(1524581428.942:1993): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcRXssNu.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.157935] audit: type=1400 audit(1524581428.942:1994): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.157940] audit: type=1400 audit(1524581428.942:1995): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcBXOfNl.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.157945] audit: type=1400 audit(1524581428.942:1996): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.157949] audit: type=1400 audit(1524581428.942:1997): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcCYZIBS.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.157952] audit: type=1400 audit(1524581428.942:1998): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.157997] audit: type=1400 audit(1524581428.942:1999): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcsAcQCR.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158001] audit: type=1400 audit(1524581428.942:2000): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158007] audit: type=1400 audit(1524581428.942:2001): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlctiGyLE.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158013] audit: type=1400 audit(1524581428.942:2002): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158018] audit: type=1400 audit(1524581428.942:2003): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcsfPoKG.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158024] audit: type=1400 audit(1524581428.942:2004): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158032] audit: type=1400 audit(1524581428.942:2005): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcTwcQeb.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158037] audit: type=1400 audit(1524581428.942:2006): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158040] audit: type=1400 audit(1524581428.942:2007): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcYRrfkH.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158048] audit: type=1400 audit(1524581428.942:2008): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158053] audit: type=1400 audit(1524581428.942:2009): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcXVTaBp.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158057] audit: type=1400 audit(1524581428.942:2010): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158060] audit: type=1400 audit(1524581428.942:2011): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcUAYLkV.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158066] audit: type=1400 audit(1524581428.942:2012): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158069] audit: type=1400 audit(1524581428.942:2013): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcnwYOMP.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158073] audit: type=1400 audit(1524581428.942:2014): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158078] audit: type=1400 audit(1524581428.942:2015): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcyUkOjh.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158081] audit: type=1400 audit(1524581428.942:2016): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158085] audit: type=1400 audit(1524581428.942:2017): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcLvkRiZ.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158089] audit: type=1400 audit(1524581428.942:2018): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158093] audit: type=1400 audit(1524581428.942:2019): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcjJYMqk.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158100] audit: type=1400 audit(1524581428.942:2020): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158102] audit: type=1400 audit(1524581428.942:2021): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcyBHpMX.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:28 coal kernel: [ 8002.158105] audit: type=1400 audit(1524581428.942:2022): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/#510839" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:28 coal kernel: [ 8002.158110] audit: type=1400 audit(1524581428.942:2023): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/run/user/1000/snap.vlc/vlcjUMGbn.2.slave-socket" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/snap.vlc/#510839"
Apr 24 17:50:29 coal kernel: [ 8002.308621] audit: type=1400 audit(1524581429.094:2024): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:29 coal kernel: [ 8002.308624] audit: type=1400 audit(1524581429.094:2025): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:29 coal kernel: [ 8002.428644] audit: type=1400 audit(1524581429.214:2026): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:29 coal kernel: [ 8002.428647] audit: type=1400 audit(1524581429.214:2027): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:29 coal kernel: [ 8002.551884] audit: type=1400 audit(1524581429.338:2028): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:29 coal kernel: [ 8002.551888] audit: type=1400 audit(1524581429.338:2029): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:29 coal kernel: [ 8002.673916] audit: type=1400 audit(1524581429.458:2030): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/#537584092" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:29 coal kernel: [ 8002.673918] audit: type=1400 audit(1524581429.458:2031): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/common/.cache/ksycoca5_ru_NtlNTj_f3j_omvvKHGdLzPa9Q1A=" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/common/.cache/#537584092"
Apr 24 17:50:33 coal kernel: [ 8007.023262] audit: type=1400 audit(1524581433.810:2032): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.config/#806974683" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:33 coal kernel: [ 8007.023276] audit: type=1400 audit(1524581433.810:2033): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.config/QtProject.conf" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.config/#806974683"
Apr 24 17:50:33 coal kernel: [ 8007.038023] audit: type=1400 audit(1524581433.822:2034): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.config/#806974996" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:33 coal kernel: [ 8007.038032] audit: type=1400 audit(1524581433.822:2035): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.config/kdeglobals" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.config/#806974996"
Apr 24 17:50:36 coal kernel: [ 8009.658133] audit: type=1400 audit(1524581436.446:2036): apparmor="DENIED" operation="link" info="Failed name lookup - deleted entry" error=-2 profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.config/vlc/#793014" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000
Apr 24 17:50:36 coal kernel: [ 8009.658142] audit: type=1400 audit(1524581436.446:2037): apparmor="DENIED" operation="link" profile="snap.vlc.vlc" name="/home/thresh/snap/vlc/288/.config/vlc/vlc-qt-interface.conf" pid=19173 comm="vlc" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/home/thresh/snap/vlc/288/.config/vlc/#793014"

VLC Apparmor profile:
thresh@coal ~ $ cat /var/lib/snapd/apparmor/profiles/snap.vlc.vlc

#include <tunables/global>

@{SNAP_NAME}="vlc"
@{SNAP_REVISION}="288"
@{PROFILE_DBUS}="snap_2evlc_2evlc"
@{INSTALL_DIR}="/snap"

profile "snap.vlc.vlc" (attach_disconnected) {
  # set file rules so that exec() inherits our profile unless there is
  # already a profile for it (eg, snap-confine)
  / rwkl,
  /** rwlkm,
  /** pix,

  capability,
  change_profile,
  dbus,
  network,
  mount,
  remount,
  umount,
  pivot_root,
  ptrace,
  signal,
  unix,

}

thresh@coal ~ $ cat /proc/version
Linux version 4.15.0-2-amd64 (<email address hidden>) (gcc version 7.3.0 (Debian 7.3.0-12)) #1 SMP Debian 4.15.11-1 (2018-03-20)
thresh@coal ~ $ snap version
snap 2.32.5
snapd 2.32.5
series 16
debian
kernel 4.15.0-2-amd64
thresh@coal ~ $ snap info vlc
name: vlc
summary: The ultimate media player
publisher: videolan
contact: https://www.videolan.org/support/
license: unknown
description: |
VLC is the VideoLAN project's media player.

Completely open source and privacy-friendly, it plays every multimedia file and streams.

thresh@coal ~ $ dpkg -l | grep -E '(appa|snap)'
ii apparmor 2.12-4 amd64 user-space parser utility for AppArmor
ii apparmor-utils 2.12-4 amd64 utilities for controlling AppArmor
ii libapparmor1:amd64 2.12-4 amd64 changehat AppArmor library
ii libsnappy1v5:amd64 1.1.7-1 amd64 fast compression/decompression library
ii python3-apparmor 2.12-4 amd64 AppArmor Python3 utility library
ii python3-libapparmor 2.12-4 amd64 AppArmor library Python3 bindings
ii snapd 2.30-5+b1 amd64 Tool to interact with Ubuntu Core Snappy.
thresh@coal ~ $

Revision history for this message

Konstantin Pavlov (thresh) wrote on 2018-04-24:

messages.txt Edit (42.5 KiB, text/plain)

The same happens with VLC snap on Ubuntu 18.04 beta.

LC_ALL=C XDG_CURRENT_DESKTOP=KDE snap run vlc -vvv results in the same UI issues when opening a file dialog, and the attached apparmor denials in messages.txt, with attached snap.vlc.vlc.

Revision history for this message

Konstantin Pavlov (thresh) wrote on 2018-04-24:

snap.vlc.vlc Edit (49.8 KiB, text/plain)

Revision history for this message

Konstantin Pavlov (thresh) wrote on 2018-04-24:

I should also add that this is only activating when XDG_CURRENT_DESKTOP=KDE is set and when Qt5 tries to launch kio/ksysoca to show proper KDE file open dialogs.

Revision history for this message

Konstantin Pavlov (thresh) wrote on 2018-04-26:

Ubuntu 16.04 dmesg output Edit (36.6 KiB, text/plain)

The same happens on Ubuntu 16.04.

Completely open source and privacy-friendly, it plays every multimedia file and streams.

  It notably plays MKV, MP4, MPEG, MPEG-2, MPEG-4, DivX, MOV, WMV, QuickTime, WebM, FLAC, MP3,
  Ogg/Vorbis files, BluRays, DVDs, VCDs, podcasts, and multimedia streams from various network sources.
  It supports subtitles, closed captions and is translated in numerous languages.
commands:
  - vlc
notes:
  private: false
  confinement: strict
  devmode: false
  jailmode: false
  trymode: false
  enabled: true
  broken: false
  ignore-validation: false
snap-id: RT9mcUhVsRYrDLG8qnvGiy26NKvv6Qkd
tracking: beta
refreshed: 2018-04-26T09:09:49+03:00
installed: 3.0.2-11-g7c1d21a (293) 192MB
channels:
  stable: 3.0.1-4-g14a4897 (190) 189MB -
  candidate: 3.0.2 (277) 192MB -
  beta: 3.0.2-11-g7c1d21a (293) 192MB -
  edge: 4.0.0-dev-2536-g79afb97 (292) 197MB -
thresh@thresh-VirtualBox:~$ dpkg -l | grep -i appa
ii apparmor 2.10.95-0ubuntu2.8 amd64 user-space parser utility for AppArmor
ii libapparmor-perl 2.10.95-0ubuntu2.8 amd64 AppArmor library Perl bindings
ii libapparmor1:amd64 2.10.95-0ubuntu2.8 amd64 changehat AppArmor library
thresh@thresh-VirtualBox:~$

The same happens on Ubuntu 16.04.

thresh@thresh-VirtualBox:~$ cat /proc/version
Linux version 4.13.0-36-generic (buildd@lgw01-amd64-033) (gcc version 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.9)) #40~16.04.1-Ubuntu SMP Fri Feb 16 23:25:58 UTC 2018
thresh@thresh-VirtualBox:~$ dpkg -l | grep -i snap
ii  libsnapd-glib1:amd64                       1.13-0ubuntu0.16.04.1                        amd64        GLib snapd library
ii  snapd                                      2.29.4.2                                     amd64        Daemon and tooling that enable snap packages
ii  snapd-login-service                        1.13-0ubuntu0.16.04.1                        amd64        Daemon to allow non-root access to snapd
ii  ubuntu-core-launcher                       2.29.4.2                                     amd64        Transitional package for snapd
thresh@thresh-VirtualBox:~$ snap version
snap    2.32.5
snapd   2.32.5
series  16
ubuntu  16.04
kernel  4.13.0-36-generic
thresh@thresh-VirtualBox:~$ snap info vlc --verbose
name:      vlc
summary:   The ultimate media player
publisher: videolan
contact:   https://www.videolan.org/support/
license:   unknown
description: |
  VLC is the VideoLAN project's media player.
  
  Completely open source and privacy-friendly, it plays every multimedia file and streams.
  
  It notably plays MKV, MP4, MPEG, MPEG-2, MPEG-4, DivX, MOV, WMV, QuickTime, WebM, FLAC, MP3,
  Ogg/Vorbis files, BluRays, DVDs, VCDs, podcasts, and multimedia streams from various network sources.
  It supports subtitles, closed captions and is translated in numerous languages.
commands:
  - vlc
notes:               
  private:           false
  confinement:       strict
  devmode:           false
  jailmode:          false
  trymode:           false
  enabled:           true
  broken:            false
  ignore-validation: false
snap-id:   RT9mcUhVsRYrDLG8qnvGiy26NKvv6Qkd
tracking:  beta
refreshed: 2018-04-26T09:09:49+03:00
installed:   3.0.2-11-g7c1d21a       (293) 192MB 
channels:                                  
  stable:    3.0.1-4-g14a4897        (190) 189MB -
  candidate: 3.0.2                   (277) 192MB -
  beta:      3.0.2-11-g7c1d21a       (293) 192MB -
  edge:      4.0.0-dev-2536-g79afb97 (292) 197MB -
thresh@thresh-VirtualBox:~$ dpkg -l | grep -i appa
ii  apparmor                                   2.10.95-0ubuntu2.8                           amd64        user-space parser utility for AppArmor
ii  libapparmor-perl                           2.10.95-0ubuntu2.8                           amd64        AppArmor library Perl bindings
ii  libapparmor1:amd64                         2.10.95-0ubuntu2.8                           amd64        changehat AppArmor library
thresh@thresh-VirtualBox:~$

Revision history for this message

Konstantin Pavlov (thresh) wrote on 2018-04-26:

/var/lib/snapd/apparmor/profiles/snap.vlc.vlc from ubuntu 16.04 Edit (49.8 KiB, text/plain)

ubuntu 16.04 apparmor vlc rules

Revision history for this message

Launchpad Janitor (janitor) wrote on 2021-03-19:

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in apparmor (Ubuntu):
status:	New → Confirmed

Revision history for this message

Seth Arnold (seth-arnold) wrote on 2021-03-20:

AppArmor just enforces the policies that were given to it; please report this issue to whoever packaged the snap you're using.

Thanks

Changed in apparmor (Ubuntu):
status:	Confirmed → Invalid

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntuapparmor package

apparmor denies VLC to open files in devmode

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
apparmor package