[] audit: type=1400 audit(): apparmor="DENIED" operation="file_inherit" profile="libreoffice-senddoc" name="xxxxx" pid=8106 comm="senddoc" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
[] audit: type=1400 audit(): apparmor="DENIED" operation="exec" profile="libreoffice-senddoc" name="/usr/bin/kmail" pid=8116 comm="senddoc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
cat /etc/apparmor.d/usr.lib.libreoffice.program.senddoc
#include <tunables/global>
profile libreoffice-senddoc /usr/lib/libreoffice/program/senddoc { #include <abstractions/base>
#include <abstractions/user-tmp>
/{usr/,}bin/sh rmix, /{usr/,}bin/bash rmix, /{usr/,}bin/dash rmix, /{usr/,}bin/sed rmix, /usr/bin/dirname rmix, /usr/bin/basename rmix, /{usr/,}bin/grep rmix, /{usr/,}bin/uname rmix, /usr/bin/xdg-open rPUx, /usr/bin/xdg-email rPUx, /dev/null rw, /usr/lib/libreoffice/program/uri-encode rmpux, /usr/share/libreoffice/share/config/* r, owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw, }
[] audit: type=1400 audit(): apparmor="DENIED" operation= "file_inherit" profile= "libreoffice- senddoc" name="xxxxx" pid=8106 comm="senddoc" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
[] audit: type=1400 audit(): apparmor="DENIED" operation="exec" profile= "libreoffice- senddoc" name="/ usr/bin/ kmail" pid=8116 comm="senddoc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
cat /etc/apparmor. d/usr.lib. libreoffice. program. senddoc
#include <tunables/global>
profile libreoffice-senddoc /usr/lib/ libreoffice/ program/ senddoc {
#include <abstractions/base>
#include <abstractions/ user-tmp>
/{usr/,}bin/sh rmix, bin/xdg- email rPUx, lib/libreoffice /program/ uri-encode rmpux, share/libreoffi ce/share/ config/ * r, /.config/ libreoffice{ ,dev}/? /user/uno_ packages/ cache/log. txt rw,
/{usr/,}bin/bash rmix,
/{usr/,}bin/dash rmix,
/{usr/,}bin/sed rmix,
/usr/bin/dirname rmix,
/usr/bin/basename rmix,
/{usr/,}bin/grep rmix,
/{usr/,}bin/uname rmix,
/usr/bin/xdg-open rPUx,
/usr/
/dev/null rw,
/usr/
/usr/
owner @{HOME}
}