Bug#919536: surf: Warnings and AppError audit messages about GPU
On Thu, 17 Jan 2019 22:06:58 +0100 Reiner Herrmann wrote: > Hi Leo, > > On Thu, Jan 17, 2019 at 12:13:56AM +, Leo Singer wrote: > > My apologies for spamming you with a bunch of different AppArmor issues. > > I am trying to understand and differentiate the issues myself; please > > let me know if it would be better for me just to send you a list of all > > of the errors. > > your reports are very appreciated! Thank you for doing that. > > > There are several error messages related to GL and Mesa, which I'm > > trying to understand better because of broader GPU stability issues > > on my Raspberry Pi 3B+. When I start surf, I see the following warnings: > > > > libGL error: MESA-LOADER: failed to retrieve device information > > MESA-LOADER: failed to retrieve device information > > MESA-LOADER: failed to retrieve device information > > Do you notice any issues (e.g. degraded performance) because of this? No. > > [ 6898.198526] audit: type=1400 audit(1547682794.480:160): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/class/video4linux/" pid=6003 comm="gst-plugin-scan" > > requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > There is an "abstractions/video" that I can include to allow access to > this directory. > > [ 6906.716855] audit: type=1400 audit(1547682802.996:161): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6906.720022] audit: type=1400 audit(1547682802.996:162): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6906.720086] audit: type=1400 audit(1547682802.996:163): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6906.720111] audit: type=1400 audit(1547682802.996:164): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.851155] audit: type=1400 audit(1547682805.132:165): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.852661] audit: type=1400 audit(1547682805.132:166): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.852715] audit: type=1400 audit(1547682805.132:167): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > [ 6908.852745] audit: type=1400 audit(1547682805.132:168): > > apparmor="DENIED" operation="open" profile="/usr/bin/surf" > > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > > Does it help if /sys/devices/platform/soc/soc:gpu/* is allowed for reading? > Or will there be additional errors? That silences the errors. > > Regards, > Reiner
Bug#919536: surf: Warnings and AppError audit messages about GPU
Hi Leo, On Thu, Jan 17, 2019 at 12:13:56AM +, Leo Singer wrote: > My apologies for spamming you with a bunch of different AppArmor issues. > I am trying to understand and differentiate the issues myself; please > let me know if it would be better for me just to send you a list of all > of the errors. your reports are very appreciated! Thank you for doing that. > There are several error messages related to GL and Mesa, which I'm > trying to understand better because of broader GPU stability issues > on my Raspberry Pi 3B+. When I start surf, I see the following warnings: > > libGL error: MESA-LOADER: failed to retrieve device information > MESA-LOADER: failed to retrieve device information > MESA-LOADER: failed to retrieve device information Do you notice any issues (e.g. degraded performance) because of this? > [ 6898.198526] audit: type=1400 audit(1547682794.480:160): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" name="/sys/class/video4linux/" > pid=6003 comm="gst-plugin-scan" requested_mask="r" denied_mask="r" fsuid=1000 > ouid=0 There is an "abstractions/video" that I can include to allow access to this directory. > [ 6906.716855] audit: type=1400 audit(1547682802.996:161): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6906.720022] audit: type=1400 audit(1547682802.996:162): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6906.720086] audit: type=1400 audit(1547682802.996:163): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6906.720111] audit: type=1400 audit(1547682802.996:164): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.851155] audit: type=1400 audit(1547682805.132:165): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.852661] audit: type=1400 audit(1547682805.132:166): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.852715] audit: type=1400 audit(1547682805.132:167): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 > [ 6908.852745] audit: type=1400 audit(1547682805.132:168): apparmor="DENIED" > operation="open" profile="/usr/bin/surf" > name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 > comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Does it help if /sys/devices/platform/soc/soc:gpu/* is allowed for reading? Or will there be additional errors? Regards, Reiner signature.asc Description: PGP signature
Bug#919536: surf: Warnings and AppError audit messages about GPU
Package: surf Version: 2.0+git20181009-2.1 Severity: minor Dear Maintainer, My apologies for spamming you with a bunch of different AppArmor issues. I am trying to understand and differentiate the issues myself; please let me know if it would be better for me just to send you a list of all of the errors. There are several error messages related to GL and Mesa, which I'm trying to understand better because of broader GPU stability issues on my Raspberry Pi 3B+. When I start surf, I see the following warnings: libGL error: MESA-LOADER: failed to retrieve device information MESA-LOADER: failed to retrieve device information MESA-LOADER: failed to retrieve device information I also see the following AppArmor audit messages which look like they might be related: [ 6898.198526] audit: type=1400 audit(1547682794.480:160): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/class/video4linux/" pid=6003 comm="gst-plugin-scan" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6906.716855] audit: type=1400 audit(1547682802.996:161): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6906.720022] audit: type=1400 audit(1547682802.996:162): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6906.720086] audit: type=1400 audit(1547682802.996:163): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6906.720111] audit: type=1400 audit(1547682802.996:164): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6908.851155] audit: type=1400 audit(1547682805.132:165): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6908.852661] audit: type=1400 audit(1547682805.132:166): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6908.852715] audit: type=1400 audit(1547682805.132:167): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [ 6908.852745] audit: type=1400 audit(1547682805.132:168): apparmor="DENIED" operation="open" profile="/usr/bin/surf" name="/sys/devices/platform/soc/soc:gpu/uevent" pid=5984 comm="ositorWorkQueue" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Thanks, Leo -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: armhf (armv7l) Kernel: Linux 4.19.0-1-armmp (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages surf depends on: ii libc6 2.28-5 ii libgcr-base-3-1 3.28.0-4 ii libgcr-ui-3-1 3.28.0-4 ii libglib2.0-0 2.58.2-3 ii libgtk-3-03.24.2-3 ii libwebkit2gtk-4.0-37 2.22.5-1 ii libx11-6 2:1.6.7-1 Versions of packages surf recommends: ii curl 7.62.0-1 ii suckless-tools 44-1 ii x11-utils7.7+4 ii xterm [x-terminal-emulator] 342-1 Versions of packages surf suggests: ii apparmor 2.13.2-3 -- Configuration Files: /etc/apparmor.d/usr.bin.surf changed [not included] -- no debconf information
