apparmor-profiles installs the chromium-browser profile but not the abstraction
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor (Ubuntu) |
Fix Released
|
High
|
Jamie Strandboge |
Bug Description
The apparmor-profiles binary package from apparmor 2.13.2-9ubuntu2 in disco-proposed is not handling the chromium-browser profile and abstraction correctly. It installs the profile but not the abstraction which makes profile loading fail.
$ sudo apt install apparmor-
Reading package lists... Done
Building dependency tree
Reading state information... Done
Selected version '2.13.2-9ubuntu2' (Ubuntu:
The following NEW packages will be installed:
apparmor-profiles
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 32.5 kB of archives.
After this operation, 353 kB of additional disk space will be used.
Get:1 http://
2.13.2-9ubuntu2 [32.5 kB]
Fetched 32.5 kB in 0s (95.3 kB/s)
Selecting previously unselected package apparmor-profiles.
(Reading database ... 119746 files and directories currently installed.)
Preparing to unpack .../apparmor-
Unpacking apparmor-profiles (2.13.2-9ubuntu2) ...
Setting up apparmor-profiles (2.13.2-9ubuntu2) ...
AppArmor parser error for /etc/apparmor.
usr.bin.
This makes the apparmor service fail to start:
$ sudo service apparmor restart
Job for apparmor.service failed because the control process exited with error code.
See "systemctl status apparmor.service" and "journalctl -xe" for details.
$ systemctl status apparmor.service | cat
● apparmor.service - Load AppArmor profiles
Loaded: loaded (/lib/systemd/
Active: failed (Result: exit-code) since Wed 2019-03-27 13:05:37 UTC; 41s ago
Docs: man:apparmor(7)
https:/
Process: 5103 ExecStart=
Main PID: 5103 (code=exited, status=1/FAILURE)
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 apparmor.
Mar 27 13:05:37 sec-disco-amd64 systemd[1]: apparmor.service: Main process exited, code=exited, status=1/FAILURE
Mar 27 13:05:37 sec-disco-amd64 systemd[1]: apparmor.service: Failed with result 'exit-code'.
Mar 27 13:05:37 sec-disco-amd64 systemd[1]: Failed to start Load AppArmor profiles.
This failure was noticed by the kernel team as it makes the kernel autopkgtests to fail while running QRT's test-apparmor.py.