I'm not aware of any way to get the apparmor.service to print out what
profile it is working on without actually modifying the service

however your dmesg does show the reason for the failure, it looks like
the apparmor_parser is being killed by the oom killer

[ 5986.338089] [13520]     0 13520  3056587  3053749 24539136        0          
   0 apparmor_parser
[ 5986.338090] Out of memory: Kill process 13520 (apparmor_parser) score 646 or 
sacrifice child
[ 5986.338095] Killed process 13520 (apparmor_parser) total-vm:12226348kB, 
anon-rss:12214996kB, file-rss:0kB, shmem-rss:0kB

we should be able to narrow down which profile is causing the problem by
comparing the set of profiles being reported as loaded to those that are
on the system.

We can then manually run the apparmor_parser to see which profile is
using some much memory to compile

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1830502

Title:
  apparmor fails to start with no parser errors

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1830502/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to