[GH-ISSUE #2084] AppArmor not working in OpenSuse #1409

Closed
opened 2026-05-05 08:04:25 -06:00 by gitea-mirror · 6 comments
Owner

Originally created by @chewblacka on GitHub (Aug 15, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2084

AppArmor doesn't seem to work with okular in firejail (OpenSUSE Leap 15).
I get the following warning:

Warning: Cannot confine the application using AppArmor.
Maybe firejail-default AppArmor profile is not loaded into the kernel.
As root, run "aa-enforce firejail-default" to load it.

But then when I run "aa-enforce firejail-default" I get:

Setting /etc/apparmor.d/firejail-default to enforce mode.
ERROR: Path doesn't start with / or variable: firejail-default

Any ideas?

Originally created by @chewblacka on GitHub (Aug 15, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2084 AppArmor doesn't seem to work with okular in firejail (OpenSUSE Leap 15). I get the following warning: ``` Warning: Cannot confine the application using AppArmor. Maybe firejail-default AppArmor profile is not loaded into the kernel. As root, run "aa-enforce firejail-default" to load it. ``` But then when I run "aa-enforce firejail-default" I get: ``` Setting /etc/apparmor.d/firejail-default to enforce mode. ERROR: Path doesn't start with / or variable: firejail-default ``` Any ideas?
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 15, 2018):

Try restarting - I've had this issue after upgrading apparmor.

<!-- gh-comment-id:413363526 --> @chiraag-nataraj commented on GitHub (Aug 15, 2018): Try restarting - I've had this issue after upgrading apparmor.
Author
Owner

@chewblacka commented on GitHub (Aug 15, 2018):

Restarted. Still the same sadly.

<!-- gh-comment-id:413371165 --> @chewblacka commented on GitHub (Aug 15, 2018): Restarted. Still the same sadly.
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 15, 2018):

Hmm, okay. Maybe someone else who uses OpenSUSE can chime in - I'm on Debian.

<!-- gh-comment-id:413371410 --> @chiraag-nataraj commented on GitHub (Aug 15, 2018): Hmm, okay. Maybe someone else who uses OpenSUSE can chime in - I'm on Debian.
Author
Owner

@chewblacka commented on GitHub (Aug 16, 2018):

Oops, I've just realized it's not just okular but everything I run in firejail gives that warning about apparmor (I've changed thread title accordingly).

<!-- gh-comment-id:413506963 --> @chewblacka commented on GitHub (Aug 16, 2018): Oops, I've just realized it's not just okular but everything I run in firejail gives that warning about apparmor (I've changed thread title accordingly).
Author
Owner

@chewblacka commented on GitHub (Aug 16, 2018):

Weird - I rebooted (after nothing had changed), and it started working!

<!-- gh-comment-id:413514686 --> @chewblacka commented on GitHub (Aug 16, 2018): Weird - I rebooted (after nothing had changed), and it started working!
Author
Owner

@smitsohu commented on GitHub (Aug 16, 2018):

For the record: You have probably run into an AppArmor regression, compare this report on the bugtracker https://bugs.launchpad.net/apparmor/+bug/1775591

Guess this has been fixed in the package and rebooting was necessary to finish the update.

<!-- gh-comment-id:413601513 --> @smitsohu commented on GitHub (Aug 16, 2018): For the record: You have probably run into an AppArmor regression, compare this report on the bugtracker https://bugs.launchpad.net/apparmor/+bug/1775591 Guess this has been fixed in the package and rebooting was necessary to finish the update.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1409
No description provided.