Hello Dale.

It seems, that I've had the same/similar problem with AppArmor and
'usr.lib.snapd.snap-confine.real' profile [1]. The strange thing was,
that I couldn't change the enforcement mode for any profile! For example
Firefox etc.

Please edit this profile and check if this line is commented. If it
isn't then You can do this by adding '#' etc.:

- include "/var/lib/snapd/apparmor/snap-confine"
+ #include "/var/lib/snapd/apparmor/snap-confine"

Next, reboot system or reload AppArmor service. In my case, commenting
an include '/var/lib/snapd/apparmor/snap-confine.d' line, fixed this
issue, which seems to be similar to your problem. However, it should be
fixed via 'snapd' package update but I don't remember if there was such
an update. Anyway, I hope it will help You.

Thanks, best regards.
_____________________
[1] https://lists.ubuntu.com/archives/apparmor/2017-November/011330.html

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1773515

Title:
  apparmour fails after removal of snapd

Status in apparmor package in Ubuntu:
  New

Bug description:
  $ sudo systemctl status apparmor
  ● apparmor.service - AppArmor initialization
     Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor 
preset: enabled)
     Active: failed (Result: exit-code) since Sat 2018-05-26 10:36:35 BST; 38s 
ago
       Docs: man:apparmor(7)
             http://wiki.apparmor.net/
    Process: 2850 ExecStart=/etc/init.d/apparmor start (code=exited, status=123)
   Main PID: 2850 (code=exited, status=123)

  May 26 10:36:35 ThisOne apparmor[2850]: Skipping profile in 
/etc/apparmor.d/disable: usr.bin.firefox
  May 26 10:36:35 ThisOne apparmor[2850]: AppArmor parser error for 
/etc/apparmor.d/usr.lib.snapd.snap-confine.real in 
/etc/apparmor.d/usr.lib.snapd.snap-confine.real at line 11: Could not open 
'/var/lib/snapd/apparmor/snap-confine'
  May 26 10:36:35 ThisOne apparmor[2850]: Skipping profile in 
/etc/apparmor.d/disable: usr.sbin.rsyslogd
  May 26 10:36:35 ThisOne apparmor[2850]: Skipping profile in 
/etc/apparmor.d/disable: usr.bin.firefox
  May 26 10:36:35 ThisOne apparmor[2850]: AppArmor parser error for 
/etc/apparmor.d/usr.lib.snapd.snap-confine.real in 
/etc/apparmor.d/usr.lib.snapd.snap-confine.real at line 11: Could not open 
'/var/lib/snapd/apparmor/snap-confine'
  May 26 10:36:35 ThisOne apparmor[2850]: Skipping profile in 
/etc/apparmor.d/disable: usr.sbin.rsyslogd
  May 26 10:36:35 ThisOne apparmor[2850]:    ...fail!
  May 26 10:36:35 ThisOne systemd[1]: apparmor.service: Main process exited, 
code=exited, status=123/n/a
  May 26 10:36:35 ThisOne systemd[1]: apparmor.service: Failed with result 
'exit-code'.
  May 26 10:36:35 ThisOne systemd[1]: Failed to start AppArmor initialization.

  $ sudo apt-get install apparmor-easyprof 
  Reading package lists... Done
  Building dependency tree       
  Reading state information... Done
  apparmor-easyprof is already the newest version (2.12-4ubuntu5).
  0 to upgrade, 0 to newly install, 0 to remove and 0 not to upgrade.

  $ sudo systemctl start apparmor.service
  Job for apparmor.service failed because the control process exited with error 
code.
  See "systemctl status apparmor.service" and "journalctl -xe" for details.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1773515/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to