messages, while starting firefox, after updating ubuntu to 20.10:
Jan 11 23:26:48 dinar-comp kernel: [ 181.634648] audit: type=1400 audit(1610396808.475:44): apparmor="DENIED" operation="open" profile="firefox" name="/proc/2003/cgroup" pid=2003 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 Jan 11 23:26:48 dinar-comp kernel: [ 181.989310] audit: type=1400 audit(1610396808.831:45): apparmor="DENIED" operation="connect" profile="firefox" name="/tmp/.X11-unix/X0" pid=2207 comm="MainThread" requested_mask="w" denied_mask="w" fsuid=1000 ouid=0
i added these rules: @{PROC}/[0-9]*/cgroup r, /tmp/.X11-unix/X0 w,
then, after enabling them and ff restart:
Jan 11 23:45:25 dinar-comp kernel: [ 1298.595946] audit: type=1400 audit(1610397925.435:79): apparmor="DENIED" operation="open" profile="firefox" name="/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us" pid=2437 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
i added this rule: /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,
messages, while starting firefox, after updating ubuntu to 20.10:
Jan 11 23:26:48 dinar-comp kernel: [ 181.634648] audit: type=1400 audit(161039680 8.475:44) : apparmor="DENIED" operation="open" profile="firefox" name="/ proc/2003/ cgroup" pid=2003 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 8.831:45) : apparmor="DENIED" operation="connect" profile="firefox" name="/ tmp/.X11- unix/X0" pid=2207 comm="MainThread" requested_mask="w" denied_mask="w" fsuid=1000 ouid=0
Jan 11 23:26:48 dinar-comp kernel: [ 181.989310] audit: type=1400 audit(161039680
i added these rules: /[0-9]* /cgroup r,
@{PROC}
/tmp/.X11-unix/X0 w,
then, after enabling them and ff restart:
Jan 11 23:45:25 dinar-comp kernel: [ 1298.595946] audit: type=1400 audit(161039792 5.435:79) : apparmor="DENIED" operation="open" profile="firefox" name="/ sys/fs/ cgroup/ cpu,cpuacct/ cpu.cfs_ quota_us" pid=2437 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
i added this rule: cgroup/ cpu,cpuacct/ cpu.cfs_ quota_us r,
/sys/fs/