@Robie Basak (racb), thanks for the fix - seems to work for me: 1. Re-enabled the original profile 2. Enabled proposed repo 3. Installed updated apparmor version (4.0.1really4.0.0-beta3-0ubuntu0.1) 4. Reboot 5. Test KeepPassXC, Ksnip - can save again
p.s. I no longer see 'bwrap' under /etc/apparmor.d (`grep -ir bwrap /etc/apparmor.d`) Details of install and test: ``` # Enable proposed cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list # Enable Ubuntu proposed archive deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe EOF cat <<EOF >/etc/apt/preferences.d/proposed-updates # Configure apt to allow selective installs of packages from proposed Package: * Pin: release a=$(lsb_release -cs)-proposed Pin-Priority: 400 EOF # Re-enable brwap profile aa-enforce /usr/bin/bwrap # Install fix root@ubuntu2404:/etc/apt/sources.list.d# apt install apparmor/noble-proposed Reading package lists... Done Building dependency tree... Done Reading state information... Done Selected version '4.0.1really4.0.0-beta3-0ubuntu0.1' (Ubuntu:24.04/noble-proposed [amd64]) for 'apparmor' Suggested packages: apparmor-profiles-extra The following packages will be upgraded: apparmor 1 upgraded, 0 newly installed, 0 to remove and 28 not upgraded. Need to get 638 kB of archives. After this operation, 32.8 kB disk space will be freed. Get:1 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 apparmor amd64 4.0.1really4.0.0-beta3-0ubuntu0.1 [638 kB] Fetched 638 kB in 2s (352 kB/s) Preconfiguring packages ... (Reading database ... 217302 files and directories currently installed.) Preparing to unpack .../apparmor_4.0.1really4.0.0-beta3-0ubuntu0.1_amd64.deb ... Unpacking apparmor (4.0.1really4.0.0-beta3-0ubuntu0.1) over (4.0.1-0ubuntu0.24.04.2) ... Setting up apparmor (4.0.1really4.0.0-beta3-0ubuntu0.1) ... Installing new version of config file /etc/apparmor.d/abstractions/authentication ... Installing new version of config file /etc/apparmor.d/abstractions/samba ... Installing new version of config file /etc/apparmor.d/firefox ... Removing obsolete conffile /etc/apparmor.d/abstractions/transmission-common ... Removing obsolete conffile /etc/apparmor.d/balena-etcher ... Removing obsolete conffile /etc/apparmor.d/bwrap-userns-restrict ... Removing obsolete conffile /etc/apparmor.d/foliate ... Removing obsolete conffile /etc/apparmor.d/transmission ... Removing obsolete conffile /etc/apparmor.d/wike ... Reloading AppArmor profiles Warning: found usr.sbin.sssd in /etc/apparmor.d/force-complain, forcing complain mode Warning from /etc/apparmor.d (/etc/apparmor.d/usr.sbin.sssd line 63): Caching disabled for: 'usr.sbin.sssd' due to force complain Processing triggers for man-db (2.12.0-4build2) ... reboot # Run KeePassXC, no more error 🙂 flatpak run org.keepassxc.KeePassXC ``` -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2072811 Title: Apparmor: New update broke flatpak with `apparmor="DENIED"` To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2072811/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
