[GH-ISSUE #3432] apparmor breaks dbus-*=filter #2158

Closed
opened 2026-05-05 08:50:07 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @rusty-snake on GitHub (May 23, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3432

Ubuntu 20.04:

command: firejail --dbus-user=filter --dbus-user.own=org.gnome.gedit --dbus-user.talk=ca.desrt.dconf --apparmor gedit
note: settings are imutable

journal: AVC apparmor="DENIED" operation="connect" profile="firejail-default" name="/run/firejail/dbus/1000/5813-user" pid=5819 comm="gedit" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000

Originally created by @rusty-snake on GitHub (May 23, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3432 Ubuntu 20.04: command: `firejail --dbus-user=filter --dbus-user.own=org.gnome.gedit --dbus-user.talk=ca.desrt.dconf --apparmor gedit` note: settings are imutable journal: `AVC apparmor="DENIED" operation="connect" profile="firejail-default" name="/run/firejail/dbus/1000/5813-user" pid=5819 comm="gedit" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000`
gitea-mirror 2026-05-05 08:50:07 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@Vincent43 commented on GitHub (May 28, 2020):

@rusty-snake try adding in firejail-default and reload it:

owner /{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w,

or
/{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w,

<!-- gh-comment-id:635289037 --> @Vincent43 commented on GitHub (May 28, 2020): @rusty-snake try adding in `firejail-default` and reload it: `owner /{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w,` or `/{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w,`
Author
Owner

@rusty-snake commented on GitHub (May 28, 2020):

💯

<!-- gh-comment-id:635432080 --> @rusty-snake commented on GitHub (May 28, 2020): :100:
Author
Owner

@curiosityseeker commented on GitHub (May 31, 2020):

So shouldn't this rule added to firejail-default by default?

<!-- gh-comment-id:636445764 --> @curiosityseeker commented on GitHub (May 31, 2020): So shouldn't this rule added to `firejail-default` by default?
Author
Owner

@Vincent43 commented on GitHub (May 31, 2020):

It should

<!-- gh-comment-id:636462809 --> @Vincent43 commented on GitHub (May 31, 2020): It should
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2158
No description provided.