Comment 26 for bug 2072811

Revision history for this message
klo (klo-2k) wrote :

@Robie Basak (racb), thanks for the fix - seems to work for me:

1. Re-enabled the original profile
2. Enabled proposed repo
3. Installed updated apparmor version (4.0.1really4.0.0-beta3-0ubuntu0.1)
4. Reboot
5. Test KeepPassXC, Ksnip - can save again

p.s. I no longer see 'bwrap' under /etc/apparmor.d (`grep -ir bwrap /etc/apparmor.d`)

Details of install and test:

```
# Enable proposed

cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

cat <<EOF >/etc/apt/preferences.d/proposed-updates
# Configure apt to allow selective installs of packages from proposed
Package: *
Pin: release a=$(lsb_release -cs)-proposed
Pin-Priority: 400
EOF

# Re-enable brwap profile

aa-enforce /usr/bin/bwrap

# Install fix

root@ubuntu2404:/etc/apt/sources.list.d# apt install apparmor/noble-proposed
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Selected version '4.0.1really4.0.0-beta3-0ubuntu0.1' (Ubuntu:24.04/noble-proposed [amd64]) for 'apparmor'
Suggested packages:
  apparmor-profiles-extra
The following packages will be upgraded:
  apparmor
1 upgraded, 0 newly installed, 0 to remove and 28 not upgraded.
Need to get 638 kB of archives.
After this operation, 32.8 kB disk space will be freed.
Get:1 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 apparmor amd64 4.0.1really4.0.0-beta3-0ubuntu0.1 [638 kB]
Fetched 638 kB in 2s (352 kB/s)
Preconfiguring packages ...
(Reading database ... 217302 files and directories currently installed.)
Preparing to unpack .../apparmor_4.0.1really4.0.0-beta3-0ubuntu0.1_amd64.deb ...
Unpacking apparmor (4.0.1really4.0.0-beta3-0ubuntu0.1) over (4.0.1-0ubuntu0.24.04.2) ...
Setting up apparmor (4.0.1really4.0.0-beta3-0ubuntu0.1) ...
Installing new version of config file /etc/apparmor.d/abstractions/authentication ...
Installing new version of config file /etc/apparmor.d/abstractions/samba ...
Installing new version of config file /etc/apparmor.d/firefox ...
Removing obsolete conffile /etc/apparmor.d/abstractions/transmission-common ...
Removing obsolete conffile /etc/apparmor.d/balena-etcher ...
Removing obsolete conffile /etc/apparmor.d/bwrap-userns-restrict ...
Removing obsolete conffile /etc/apparmor.d/foliate ...
Removing obsolete conffile /etc/apparmor.d/transmission ...
Removing obsolete conffile /etc/apparmor.d/wike ...
Reloading AppArmor profiles
Warning: found usr.sbin.sssd in /etc/apparmor.d/force-complain, forcing complain mode
Warning from /etc/apparmor.d (/etc/apparmor.d/usr.sbin.sssd line 63): Caching disabled for: 'usr.sbin.sssd' due to force complain
Processing triggers for man-db (2.12.0-4build2) ...

reboot

# Run KeePassXC, no more error 🙂
flatpak run org.keepassxc.KeePassXC
```