With 2.8.0-1, I see AppArmor messages in the systemd journal for "man man":
Feb 05 13:09:30 ripley audit[30186]: AVC apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="/usr/bin/man" name="/usr/bin/preconv" pid=30186 comm="man" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/man//groff" Feb 05 13:09:30 ripley kernel: audit: type=1400 audit(1517789370.641:103): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="/usr/bin/man" name="/usr/bin/preconv" pid=30186 comm="man" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/man//groff" Feb 05 13:09:30 ripley audit[30187]: AVC apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="/usr/bin/man" name="/usr/bin/tbl" pid=30187 comm="man" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/man//groff" Feb 05 13:09:30 ripley kernel: audit: type=1400 audit(1517789370.641:104): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="/usr/bin/man" name="/usr/bin/tbl" pid=30187 comm="man" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/man//groff" Feb 05 13:09:30 ripley audit[30195]: AVC apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="/usr/bin/man" name="/usr/bin/troff" pid=30195 comm="groff" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/man//groff" Feb 05 13:09:30 ripley kernel: audit: type=1400 audit(1517789370.645:105): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="/usr/bin/man" name="/usr/bin/troff" pid=30195 comm="groff" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/bin/man//groff"
With 2.7.6.1-4+b1, there are no messages. Kind regards, -- Ben Caradoc-Davies <b...@transient.nz> Director Transient Software Limited <https://transient.nz/> New Zealand
