aa-status reports similar output
apparmor module is loaded.
12 profiles are loaded.
12 profiles are in enforce mode.
/sbin/dhclient3
/usr/bin/evince
/usr/bin/evince-previewer
/usr/bin/evince-thumbnailer
/usr/lib/NetworkManager/nm-dhcp-client.action
/usr/lib/connman/scripts/dhclient-script
/usr/lib/cups/backend/cups-pdf
/usr/lib/libvirt/virt-aa-helper
/usr/sbin/cupsd
/usr/sbin/libvirtd
/usr/sbin/tcpdump
/usr/share/gdm/guest-session/Xsession
0 profiles are in complain mode.
3 processes have profiles defined.
3 processes are in enforce mode :
/sbin/dhclient3 (7660)
/usr/sbin/cupsd (1547)
/usr/sbin/libvirtd (1331)
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
I wonder whether this is really apport; perhaps it's ecryptfs.
So I hit this today, it looks like the same bug, but no apparmor update.
My system has permanent IO load, and all apps hit the disk hard whenever they do something.
sudo cat /sys/kernel/ security/ apparmor/ profiles cups/backend/ cups-pdf (enforce) libvirt/ virt-aa- helper (enforce) evince- thumbnailer (enforce) evince- previewer (enforce) connman/ scripts/ dhclient- script (enforce) NetworkManager/ nm-dhcp- client. action (enforce) gdm/guest- session/ Xsession (enforce)
/usr/sbin/tcpdump (enforce)
/usr/sbin/libvirtd (enforce)
/usr/sbin/cupsd (enforce)
/usr/lib/
/usr/lib/
/usr/bin/
/usr/bin/
/usr/bin/evince (enforce)
/usr/lib/
/usr/lib/
/sbin/dhclient3 (enforce)
/usr/share/
aa-status reports similar output bin/evince- previewer bin/evince- thumbnailer lib/NetworkMana ger/nm- dhcp-client. action lib/connman/ scripts/ dhclient- script lib/cups/ backend/ cups-pdf lib/libvirt/ virt-aa- helper sbin/libvirtd sbin/tcpdump share/gdm/ guest-session/ Xsession sbin/libvirtd (1331)
apparmor module is loaded.
12 profiles are loaded.
12 profiles are in enforce mode.
/sbin/dhclient3
/usr/bin/evince
/usr/
/usr/
/usr/
/usr/
/usr/
/usr/
/usr/sbin/cupsd
/usr/
/usr/
/usr/
0 profiles are in complain mode.
3 processes have profiles defined.
3 processes are in enforce mode :
/sbin/dhclient3 (7660)
/usr/sbin/cupsd (1547)
/usr/
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
I wonder whether this is really apport; perhaps it's ecryptfs.
I did a sudo perf top, and got:
3415. 00 - 19.8% : read_hpet
1398. 00 - 8.1% : find_vma
1151. 00 - 6.7% : drm_clflush_pages [drm]
948.00 - 5.5% : __ticket_spin_lock
582.00 - 3.4% : rb_next
334.00 - 1.9% : acpi_os_read_port
290.00 - 1.7% : fget_light
274.00 - 1.6% : page_check_address
252.00 - 1.5% : schedule
233.00 - 1.3% : copy_user_ generic_ string
201.00 - 1.2% : kref_put
199.00 - 1.2% : unix_poll
182.00 - 1.1% : _spin_unlock_ irqrestore
177.00 - 1.0% : clear_page_c
165.00 - 1.0% : kref_get
or is this drm? that sounds really heavy