Public bug reported:
I saw the following in snappy-debug within a Questing QEMU VM,
= AppArmor =
Time: 2025-10-16T07:4
Log: apparmor="DENIED" operation="capable" class="cap"
profile="unprivileged_userns" pid=4395 comm="(insights)" capability=21
capname="sys_admin"
Capability: sys_admin
Suggestions:
* adjust program to not require 'CAP_SYS_ADMIN' (see 'man 7 capabilities')
* add one of 'cifs-mount, fuse-support, hardware-observe, hostname-control,
mount-control, network-control, steam-support, system-trace' to 'plugs'
* do nothing if program otherwise works properly
Not sure if it's causing any problems, but it appears repeatedly and
might be worth looking at.
** Affects: ubuntu-insights (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2127962
Title:
AppArmor DENIED capable operation in unprivileged_userns
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-insights/+bug/2127962/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs