From what I understand, the unprivileged_userns profile disables
capabilities:

$ cat /etc/apparmor.d/unprivileged_userns 
# Special profile transitioned to by unconfined when creating an unprivileged
# user namespace.
#
abi <abi/4.0>,
include <tunables/global>

profile unprivileged_userns {
     audit deny capability, <-----
     audit deny change_profile,
...

And the "bwrap" command (from the "bubblewrap" package?) was trying to
use them ("setpcap" in one case, "net_admin" in another). Are you sure
this is related to changing the background image? Sorry for the
question, I'm not familiar with bwrap or Budgie Desktop.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2064672

Title:
  [SRU] - fixes for apparmor on noble

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2064672/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to