For anyone else in the same boat as me before the official fix lands; I
wasn't able to launch Remmina at all on 25.04. Starting Remmina in a
terminal gave me a DBus access denied error due to an apparmor policy.
I found that to get it working again, all I needed to add to the included
apparmor profile was the dbus line from the original report above `include
<abstractions/dbus-session>`.
I initially added the two `@{HOME}/.remmina` ones, but removing them now, my
saved sessions have not disappeared.
Edit: that was enough to get it started again, now I get the TLS error
when connecting. Looking at that next
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/2106675
Title:
apparmor prevents access to saved Remmina sessions
Status in apparmor package in Ubuntu:
In Progress
Status in remmina package in Ubuntu:
Triaged
Bug description:
After upgrading to 25.04 (beta), my saved connections / target
computers in Remmina were gone. Where previously I had several saved
connection entries, there were none.
I modified /etc/apparmor.d/remmina to run with flags=(complain), re-
launched, and all my saved connections were back.
Subsequently running aa-logprof suggested the following additions:
include <abstractions/bash>
include <abstractions/dbus-session>
/etc/debian_version r,
/etc/lsb-release r,
/usr/bin/dash ix,
/usr/bin/lsb_release mrix,
/usr/bin/python3.13 mrix,
@{etc_ro}/fstab r,
owner @{HOME}/.remmina/ r,
owner @{HOME}/.remmina/* r,
(I replaced /home/*/ with ${HOME}.)
It seems likely it's possible to avoid the dbus-session include (I see
dbus-session-strict was already present), but there were many manual
rules it was requesting without that, and I don't know enough about
remmina, apparmor, or dbus to offer useful input there.
It seems quite possible that only the @{HOME}/.remmina/(*) rules are
needed to fix this, but the numerous complaints about accesses to
DBus.Properties /org/freedesktop/secrets/collection/login/... paths
seems like this rule [ dbus (send) bus=session
path="/org/freedesktop/secrets/collection/login"
interface="org.freedesktop.DBus.Properties" member=GetAll
peer=(label=unconfined), ] might not be working as expected, and I'm
suspicious they're related to loading these saved connections.
Please give us some details about the systems you are using:
* Client (OS name and version): Ubuntu 25.04 Plucky Puffin (development
branch), amd64
* Remmina version (remmina --version): org.remmina.Remmina - 1.4.39 (git n/a)
(dpkg: 1.4.39+dfsg-1)
* Desktop environment (GNOME, Unity, KDE, ..): Gnome
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2106675/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
