Hello

I would really appreciate if you could tell me why this is being denied.
I'm trying to run truecrypt and it doesn't allow me to mount. I've
attached my profile.


AVC apparmor="DENIED" operation="mount" info="failed mntpnt match"
error=-13 profile="/usr/bin/truecrypt" name="/tmp/.truecrypt_aux_mnt4/"
pid=3769 comm="truecrypt" fstype="fuse.truecrypt"

SYSCALL arch=c000003e syscall=165 success=no exit=-13 a0=160d4ff0
a1=160f9190 a2=1610a0c0 a3=6 items=1 ppid=949 pid=3769 auid=1000 uid=0
gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 t>



On 03/21/2018 10:09 PM, Seth Arnold wrote:
> (You will need to add it to all child subprofiles that execute in the
> other filesystem namespaces.)
>


** Attachment added: "usr.bin.truecrypt"
   
https://bugs.launchpad.net/bugs/1757256/+attachment/5089463/+files/usr.bin.truecrypt

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1757256

Title:
  Apparmor profile gajim

Status in apparmor package in Ubuntu:
  New

Bug description:
  Followed this guide: https://gitlab.com/apparmor/apparmor/wi … with_tools and 
saved usr.bin.gajim after scanning.
  After I restart machine and run Gajim from terminal I get:

  Fatal Python error: Py_Initialize: Unable to get the locale encoding
  ModuleNotFoundError: No module named 'encodings'

  Current thread 0x00006a383a1d5540 (most recent call first):
  Aborted (core dumped)

  If I delete the profile and restart machine it runs (to confirm it is
  profile causing).

  This is my current profile

  
  # vim:syntax=apparmor
  # ------------------------------------------------------------------
  #
  #    Copyright (C) 2015-2018 Mikhail Morfikov
  #
  #    This program is free software; you can redistribute it and/or
  #    modify it under the terms of version 2 of the GNU General Public
  #    License published by the Free Software Foundation.
  #
  # ------------------------------------------------------------------

  #include <tunables/global>

  /usr/bin/gajim {
    #include <abstractions/base>
    #include <abstractions/X>
    #include <abstractions/fonts>
    #include <abstractions/freedesktop.org>
    #include <abstractions/python>
    #include <abstractions/user-tmp>
    #include <abstractions/nameservice>
    #include <abstractions/openssl>
    #include <abstractions/dconf>

    /usr/bin/gajim mr,

    /usr/bin/ r,
    /usr/local/bin/ r,

    # Gajim plugins
    /usr/share/gajim/plugins/ r,
    /usr/share/gajim/plugins/** r,

    # Gajim home files
    owner @{HOME}/.config/gajim/ rw,
    owner @{HOME}/.config/gajim/** rw,
    owner @{HOME}/.local/share/gajim/ rw,
    owner @{HOME}/.local/share/gajim/** rwk,

    # User downloads
    owner @{HOME}/[dD]ownload{,s}/ r,
    owner @{HOME}/[dD]ownload{,s}/** rwl,
    owner @{HOME}/[dD]esktop/ r,
    owner @{HOME}/[dD]esktop/** rwl,

    # Cache
    owner /tmp/morfik_cache/.cache/gajim/ rwk,
    owner /tmp/morfik_cache/.cache/gajim/** rwk,
    owner @{HOME}/.cache/gajim/ rwk,
    owner @{HOME}/.cache/gajim/** rwk,

    # Deny access to webcam and mic
    deny /dev/video0 rw,
    deny /dev/v4l/by-path/ r,
    deny /dev/snd/pcmC0D0c rw,

    owner @{PROC}/@{pid}/mounts r,
    owner @{PROC}/@{pid}/fd/ r,
    owner @{PROC}/@{pid}/mountinfo r,

    # External apps
    /usr/lib/firefox/firefox rPUx,
    /usr/bin/gpg rPUx,

    /usr/share/glib-2.0/schemas/gschemas.compiled r,

    owner /{,var/}run/user/[0-9]*/dconf/user rw,

    # Silencer
    deny /usr/lib/python3/dist-packages/** w,
    deny /usr/share/gajim/plugins/** w,
    deny @{HOME}/ r,

    # Sounds
    /usr/bin/aplay Cx -> audio,
    /usr/bin/pacat Cx -> audio,
    profile audio {
      #include <abstractions/base>
      #include <abstractions/audio>

      /usr/bin/aplay mr,
      /usr/bin/pacat mr,

      owner @{HOME}/.Xauthority r,

      /etc/machine-id r,
      /var/lib/dbus/machine-id r,

    }

    /sbin/ldconfig Cx -> ldconfig,
    profile ldconfig {
      #include <abstractions/base>

      /sbin/ldconfig mr,

    }

    /bin/dash Cx -> dash,
    profile dash {
      #include <abstractions/base>

      /bin/dash mr,

      /bin/uname rix,

      /usr/bin/gpg rPUx,

    }

  }

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1757256/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to