In this case, Wike is installed as a deb, not snap. Why is it confined?

As far as I know, this is not how deb packages worked. Is this a very
new decision to confine all the apps even if they are installed via apt?

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2060810

Title:
  Wike does not run in Ubuntu 24.04 due to apparmor issue

Status in apparmor package in Ubuntu:
  New

Bug description:
  Wike (deb package/compiled version) does not run in Ubuntu 24.04
  possibly due to some interference between apparmor and webkit.

  ```
  $ wike

  (process:11686): Gtk-WARNING **: 02:55:41.246: Unknown key gtk-modules in 
/home/archisman/.config/gtk-4.0/settings.ini
  bwrap: setting up uid map: Permission denied

  ** (wike:11686): ERROR **: 02:55:41.837: Failed to fully launch dbus-proxy: 
Child process exited with code 1
  Trace/breakpoint trap
  ```

  A workaround is to create the file `/etc/apparmor.d/wike` with the following 
contents:
  ```
  # This profile allows everything and only exists to give the
  # application a name instead of having the label "unconfined"

  abi <abi/4.0>,
  include <tunables/global>

  profile wike /usr/bin/wike flags=(unconfined) {
    userns,

    # Site-specific additions and overrides. See local/README for details.
    include if exists <local/wike>
  }
  ```
  Then run `sudo systemctl restart apparmor.service`


  This is also reported in GitHub for Wike
  https://github.com/hugolabe/Wike/issues/181

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2060810/+subscriptions


-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to