Hi Leo, On Thu, Jan 17, 2019 at 12:13:56AM +0000, Leo Singer wrote: > My apologies for spamming you with a bunch of different AppArmor issues. > I am trying to understand and differentiate the issues myself; please > let me know if it would be better for me just to send you a list of all > of the errors.
your reports are very appreciated! Thank you for doing that. > There are several error messages related to GL and Mesa, which I'm > trying to understand better because of broader GPU stability issues > on my Raspberry Pi 3B+. When I start surf, I see the following warnings: > > libGL error: MESA-LOADER: failed to retrieve device information > MESA-LOADER: failed to retrieve device information > MESA-LOADER: failed to retrieve device information Do you notice any issues (e.g. degraded performance) because of this? > [ 6898.198526] audit: type=1400 audit(1547682794.480:160): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" name="/sys/class/video4linux/" > pid=6003 comm="gst-plugin-scan" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 There is an "abstractions/video" that I can include to allow access to this directory. > [ 6906.716855] audit: type=1400 audit(1547682802.996:161): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6906.720022] audit: type=1400 audit(1547682802.996:162): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6906.720086] audit: type=1400 audit(1547682802.996:163): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6906.720111] audit: type=1400 audit(1547682802.996:164): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.851155] audit: type=1400 audit(1547682805.132:165): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.852661] audit: type=1400 audit(1547682805.132:166): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.852715] audit: type=1400 audit(1547682805.132:167): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.852745] audit: type=1400 audit(1547682805.132:168): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Does it help if /sys/devices/platform/soc/soc:gpu/* is allowed for reading? Or will there be additional errors? Regards, Reiner
signature.asc
Description: PGP signature
