May I recommend that you run aa-logprof instead of using Grok next time? It's more likely that it produces sane results ;-) and is probably even faster than pasting your DENIED lines into Grok.
Note: aa-logprof will often propose to use abstractions/something. Sometimes this makes sense, but sometimes (especially if you want to submit a bugreport with the additions) it's a better idea to "only" add individual rules. The even better way is to attach your /var/log/audit/audit.log (or the ALLOWED/DENIED lines from journalctl, as you did) so that we can see what the program actually needs, and choose the best-matching rules (or even abstraction) for that. Speaking about that - are the ALLOWED and DENIED lines you pasted in the original report all you got, or did you see more denials? Assuming that there were additional log lines (likely if you had to add 60+ lines) - can you please attach them? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2125314 Title: Transmission-QT fails to start properly due to AppArmor misconfiguration To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2125314/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
