Comment 36 for bug 1861408

Revision history for this message
dinar qurbanov (qdinar) wrote :

messages, while starting firefox, after updating ubuntu to 20.10:

Jan 11 23:26:48 dinar-comp kernel: [ 181.634648] audit: type=1400 audit(1610396808.475:44): apparmor="DENIED" operation="open" profile="firefox" name="/proc/2003/cgroup" pid=2003 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jan 11 23:26:48 dinar-comp kernel: [ 181.989310] audit: type=1400 audit(1610396808.831:45): apparmor="DENIED" operation="connect" profile="firefox" name="/tmp/.X11-unix/X0" pid=2207 comm="MainThread" requested_mask="w" denied_mask="w" fsuid=1000 ouid=0

i added these rules:
@{PROC}/[0-9]*/cgroup r,
/tmp/.X11-unix/X0 w,

then, after enabling them and ff restart:

Jan 11 23:45:25 dinar-comp kernel: [ 1298.595946] audit: type=1400 audit(1610397925.435:79): apparmor="DENIED" operation="open" profile="firefox" name="/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us" pid=2437 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

i added this rule:
/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,