Package: surf Version: 2.1+git20250419-1 Severity: important X-Debbugs-Cc: [email protected]
Dear Maintainer, Surf does not start on cleanly installed system due to apparmor configuration. The surf error message and apparmor log are attached to this report under names surf.log and apparmor-enforce.log respectively. After switching surf profile to complain mode it is able to start. Apparmor log in complain mode is attached under the name apparmor-complain.log. -- System Information: Debian Release: 13.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.12.57+deb13-amd64 (SMP w/8 CPU threads; PREEMPT) Kernel taint flags: TAINT_FIRMWARE_WORKAROUND Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages surf depends on: ii libc6 2.41-12 ii libgcr-base-3-1 3.41.2-3 ii libgcr-ui-3-1 3.41.2-3 ii libglib2.0-0t64 2.84.4-3~deb13u1 ii libgtk-3-0t64 3.24.49-3 ii libjavascriptcoregtk-4.1-0 2.50.4-1~deb13u1 ii libwebkit2gtk-4.1-0 2.50.4-1~deb13u1 ii libx11-6 2:1.8.12-1 Versions of packages surf recommends: ii curl 8.14.1-2+deb13u2 ii gnome-terminal [x-terminal-emulator] 3.56.2-2 ii stterm [x-terminal-emulator] 0.9.2-1 ii suckless-tools 48-1+b1 ii x11-utils 7.7+7 ii xiterm+thai [x-terminal-emulator] 1.10-3 ii xterm [x-terminal-emulator] 398-1 Versions of packages surf suggests: ii apparmor 4.1.0-1 -- no debconf information
** (surf:38072): WARNING **: 09:46:57.017: Could not open /sys/class/dmi/id/chassis_type: Failed to open file “/sys/class/dmi/id/chassis_type”: Permission denied ** (surf:38072): WARNING **: 09:46:57.017: Could not open /sys/firmware/acpi/pm_profile: Failed to open file “/sys/firmware/acpi/pm_profile”: Permission denied dbus[38072]: D-Bus library appears to be incorrectly set up: see the manual page for dbus-uuidgen to correct this issue. (Failed to open "/var/lib/dbus/machine-id": Permission denied; Failed to open "/etc/machine-id": Permission denied) D-Bus not built with -rdynamic so unable to print a backtrace
[ 6639.090607] audit: type=1400 audit(1768373217.010:181): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/surf" name="/sys/devices/virtual/dmi/id/chassis_type" pid=38072 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6639.090707] audit: type=1400 audit(1768373217.010:182): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/surf" name="/sys/firmware/acpi/pm_profile" pid=38072 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6639.127826] audit: type=1400 audit(1768373217.050:183): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/surf" name="/etc/machine-id" pid=38072 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6639.127837] audit: type=1400 audit(1768373217.050:184): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/surf" name="/etc/machine-id" pid=38072 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[ 6813.117289] kauditd_printk_skb: 3 callbacks suppressed [ 6813.117292] audit: type=1400 audit(1768373391.038:226): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/sys/devices/virtual/dmi/id/chassis_type" pid=39593 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6813.169822] audit: type=1400 audit(1768373391.090:227): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/etc/machine-id" pid=39593 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6813.169941] audit: type=1400 audit(1768373391.090:228): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/etc/machine-id" pid=39593 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6813.169955] audit: type=1400 audit(1768373391.090:229): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/home/sergey/.config/fcitx/dbus/e00dcd7b43d743f3a217c8181187880c-0" pid=39593 comm="surf" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [ 6813.363525] audit: type=1400 audit(1768373391.282:230): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/proc/sys/net/ipv6/conf/all/disable_ipv6" pid=39601 comm="pool-1" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6813.490569] audit: type=1400 audit(1768373391.410:231): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/sys/devices/virtual/dmi/id/chassis_type" pid=39606 comm="WebKitWebProces" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6813.558346] audit: type=1400 audit(1768373391.478:232): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/proc/sys/net/ipv6/conf/all/disable_ipv6" pid=39601 comm="pool-2" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6814.731737] audit: type=1400 audit(1768373392.654:233): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/proc/sys/net/ipv6/conf/all/disable_ipv6" pid=39601 comm="pool-2" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6814.736621] audit: type=1400 audit(1768373392.658:234): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/proc/sys/net/ipv6/conf/all/disable_ipv6" pid=39601 comm="pool-3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6814.736991] audit: type=1400 audit(1768373392.658:235): apparmor="ALLOWED" operation="open" class="file" profile="/usr/bin/surf" name="/proc/sys/net/ipv6/conf/all/disable_ipv6" pid=39601 comm="pool-2" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
