Your message dated Wed, 03 Dec 2025 22:04:20 +0000
with message-id <[email protected]>
and subject line Bug#1110134: fixed in geoclue-2.0 2.8.0-1
has caused the Debian Bug report #1110134,
regarding geoclue-2.0: apparmor profile denies system bus socket
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1110134: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110134
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: geoclue-2.0
Version: 2.7.2-2
Severity: normal
Dear Maintainer,
The profile at /etc/apparmor.d/usr.libexec.geoclue shipped with trixie results
in the service failing to start, there are errors:
```
kernel: audit: type=1400 audit(1753168291.299:1301): apparmor="DENIED"
operation="connect" class="file" profile="/usr/libexec/geoclue"
name="/run/dbus/system_bus_socket" pid=53660 comm="pool-0" requested_mask="wr"
denied_mask="wr" fsuid=118 ouid=0
```
Using the latest version at the `ubuntu/devel` branch at
https://code.launchpad.net/ubuntu/+source/geoclue-2.0 fixes the issue after
restarting the services. The file should be attached bellow.
-- System Information:
Debian Release: 13.0
APT prefers testing-security
APT policy: (500, 'testing-security'), (500, 'testing-debug'), (500,
'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 6.14.8-2-pve (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages geoclue-2.0 depends on:
ii adduser 3.152
ii libavahi-client3 0.8-16
ii libavahi-common3 0.8-16
ii libavahi-glib1 0.8-16
ii libc6 2.41-11
ii libglib2.0-0t64 2.84.3-1
ii libjson-glib-1.0-0 1.10.6+ds-2
ii libmm-glib0 1.24.0-1
ii libnotify4 0.8.6-1
ii libsoup-3.0-0 3.6.5-3
Versions of packages geoclue-2.0 recommends:
ii avahi-daemon 0.8-16
ii iio-sensor-proxy 3.7-3
pn modemmanager <none>
ii wpasupplicant 2:2.10-24
geoclue-2.0 suggests no packages.
-- Configuration Files:
/etc/apparmor.d/usr.libexec.geoclue changed:
abi <abi/3.0>,
include <tunables/global>
/usr/libexec/geoclue flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/gnome>
include <abstractions/nameservice>
/etc/geoclue/geoclue.conf r,
/etc/geoclue/conf.d/ r,
/etc/geoclue/conf.d/*.conf r,
/etc/geolocation r,
/proc/sys/net/ipv6/conf/all/disable_ipv6 r,
/proc/*/cgroup r,
/usr/libexec/geoclue mr,
# own dbus name
dbus bind
bus=system
name=org.freedesktop.GeoClue2,
dbus send
bus=system
path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus),
# register objects
dbus (send receive)
bus=system
path=/org/freedesktop/GeoClue2{,/**}
interface={org.freedesktop.GeoClue2{,.*},org.freedesktop.DBus.*},
# auth
dbus send
bus=system
path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus),
# use Avahi
dbus send
bus=system
path=/
interface=org.freedesktop.DBus.Peer
member=Ping
peer=(name=org.freedesktop.Avahi),
dbus send
bus=system
path=/
interface=org.freedesktop.Avahi.Server
peer=(name=org.freedesktop.Avahi),
dbus (send receive)
bus=system
path=/Client[0-9]*/ServiceBrowser[0-9]*
interface=org.freedesktop.Avahi.ServiceBrowser,
# use wpa_supplicant
dbus (send receive)
bus=system
path=/fi/w1/wpa_supplicant1{,/**}
interface={fi.w1.wpa_supplicant1{,.*},org.freedesktop.DBus.Properties},
dbus receive
bus=system
path=/org/freedesktop
interface=org.freedesktop.DBus.ObjectManager
member=InterfacesRemoved,
# use ModemManager
dbus send
bus=system
path=/org/freedesktop/ModemManager1
interface={org.freedesktop.DBus.ObjectManager,org.freedesktop.DBus.Properties},
# use NetworkManager
dbus send
bus=system
path=/org/freedesktop
interface=org.freedesktop.DBus.ObjectManager
member=GetManagedObjects,
dbus (send receive)
bus=system
path=/org/freedesktop/NetworkManager{,/**}
interface={org.freedesktop.NetworkManager{,.*},org.freedesktop.DBus.Properties},
# Site-specific additions and overrides. See local/README for details.
#include if exists <local/usr.libexec.geoclue>
}
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: geoclue-2.0
Source-Version: 2.8.0-1
Done: Jeremy Bícha <[email protected]>
We believe that the bug you reported is fixed in the latest version of
geoclue-2.0, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Bícha <[email protected]> (supplier of updated geoclue-2.0 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 03 Dec 2025 16:51:04 -0500
Source: geoclue-2.0
Built-For-Profiles: noudeb
Architecture: source
Version: 2.8.0-1
Distribution: unstable
Urgency: medium
Maintainer: Laurent Bigonville <[email protected]>
Changed-By: Jeremy Bícha <[email protected]>
Closes: 1110134 1118821
Launchpad-Bugs-Fixed: 2030951
Changes:
geoclue-2.0 (2.8.0-1) unstable; urgency=medium
.
* Team upload
.
[ Jeremy Bícha ]
* New upstream release
* Bump debhelper compat to 13
* Update debian/upstream/metadata
* Update gir handling (Closes: #1118821)
* Use sysusers.d instead of adduser
* Remove obsolete maintscript
* Remove all patches: applied in new release
.
[ Laurent Bigonville ]
* d/README.Debian: Update the README to explicitly state we are using
beaconDB
* debian/copyright: Update the FSF address
* debian/control: Bump Standards-Version to 4.7.2 (no further changes)
.
[ Alessandro Astone ]
* Fix AppArmor rules for DBus (LP: #2030951, Closes: #1110134)
.
[ Chris Talbot ]
* debian/rules: Make beacondb.net default for wifi submissions
Checksums-Sha1:
93c73cb9afe958791c478428a4ee7dd4075bf8fe 2720 geoclue-2.0_2.8.0-1.dsc
d35127d28757c03ebbbd997c39331bef0f1b5376 112944 geoclue-2.0_2.8.0.orig.tar.bz2
a5225e0e95c09edd8986b875264e3b7db8487568 12864
geoclue-2.0_2.8.0-1.debian.tar.xz
e575415e9efb2ec886bbd30fd5abe15ff2d0dfbe 8930
geoclue-2.0_2.8.0-1_source.buildinfo
Checksums-Sha256:
a1d1ac33341ae8bbd99b7c8905ff337c945c0c91e707387af3060e34308546a3 2720
geoclue-2.0_2.8.0-1.dsc
c07aeb35cccf959ec1dc2e8f9a71a9d8bdd643879ef0a8d37926499541da1685 112944
geoclue-2.0_2.8.0.orig.tar.bz2
b42947ad43e08b5f01c8f34c3dd2011da4ca55aaf018fb33e2ea7e395452dd98 12864
geoclue-2.0_2.8.0-1.debian.tar.xz
6841f32c451ee5d127b7f3095fdaaf9018ff8eed844f7bf49a621f301be29ba9 8930
geoclue-2.0_2.8.0-1_source.buildinfo
Files:
368e1dce175a91183719c563fdc84066 2720 utils optional geoclue-2.0_2.8.0-1.dsc
def58282c7e1c95bc386906fdfbe29e3 112944 utils optional
geoclue-2.0_2.8.0.orig.tar.bz2
7d4b449d6b5d416cb7bf7e7c70427f36 12864 utils optional
geoclue-2.0_2.8.0-1.debian.tar.xz
63d2efd915d99d103ab50c2050c76e4f 8930 utils optional
geoclue-2.0_2.8.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=x9Hx
-----END PGP SIGNATURE-----
pgpVd4AfIr50C.pgp
Description: PGP signature
--- End Message ---
