[Bug 2098930] Re: openvpn profile doesn't allow access to files on home dir

2025-02-21 Thread Thomas Bechtold
Adding gnome-control-center here to so the desktop ppl have visibility that VPN configuration through gnome-control-center won't work anymore with this new apparmor profile. ** Also affects: gnome-control-center (Ubuntu) Importance: Undecided Status: New -- You received this bug notifi

[Bug 2098930] Re: openvpn profile doesn't allow access to files on home dir

2025-02-21 Thread John Johansen
So there is a tension here between users and security. There is no perfect solution. Allowing openvpn full access to all the users files has security implications, denying access has usability implications. As unsatisfying as it is we are working towards a long term solution, but are not there yet

[Bug 2098930] Re: openvpn profile doesn't allow access to files on home dir

2025-02-20 Thread Thomas Bechtold
thanks for the workaround. that works. But how is that expected to work for a normal Desktop user who needs to add a VPN through the GNOME Control Center network panel? You have to select there the files through the file manager so very likely the user downloaded the VPN configuration from somewhe

[Bug 2098930] Re: openvpn profile doesn't allow access to files on home dir

2025-02-20 Thread Giovanni Panozzo
I had a similar problem after I upgraded from kubuntu 24.10 to 25.04: all OpenVPN connections failed due to Apparmor denying access to $HOME/.cert/nm-openvpn I solved with sudo bash -c "echo '@{HOME}/.cert/nm-openvpn/* r,' >> /etc/apparmor.d/local/openvpn" sudo apparmor_parser -r /etc/apparmor.d

[Bug 2098930] Re: openvpn profile doesn't allow access to files on home dir

2025-02-20 Thread Georgia Garcia
hi Thomas To allow access to these files, you can add the following rule to /etc/apparmor.d/local/openvpn: @{HOME}/Documents/canonical/vpn/canonical_ta.key r, It can be done by the following command: sudo bash -c "echo '@{HOME}/Documents/canonical/vpn/canonical_ta.key r,' >> /etc/apparmor.d/loc

[Bug 2098930] Re: openvpn profile doesn't allow access to files on home dir

2025-02-20 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: apparmor (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2098930 Title: o