Public bug reported:
I'm running lintian on a set of packages, and inspecting dmesg shows me
several apparmor DENIED errors related to binaries shipped by man-db,
and blocked by the man_groff or /usr/bin/man profiles:
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.096:8069):
apparmor="DENIED" operation="file_inherit" class="file"
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="/tmp/lFKMKOMDT4" pid=215191 comm="preconv"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=1001000
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.096:8070):
apparmor="DENIED" operation="open" class="file" info="Failed name lookup -
disconnected path" error=-13
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="/usr/bin/man" name="apparmor/.null" pid=215191 comm="preconv"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=0
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.096:8071):
apparmor="DENIED" operation="open" class="file" info="Failed name lookup -
disconnected path" error=-13
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="apparmor/.null" pid=215191 comm="preconv"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=0
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.103:8072):
apparmor="DENIED" operation="file_inherit" class="file"
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="/tmp/Iz673ckQUN" pid=215195 comm="troff"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=1001000
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.103:8073):
apparmor="DENIED" operation="open" class="file" info="Failed name lookup -
disconnected path" error=-13
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="/usr/bin/man" name="apparmor/.null" pid=215195 comm="troff"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=0
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.103:8074):
apparmor="DENIED" operation="open" class="file" info="Failed name lookup -
disconnected path" error=-13
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="apparmor/.null" pid=215195 comm="troff"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=0
[Mon Feb 23 18:21:00 2026] audit: type=1400 audit(1771870859.103:8075):
apparmor="DENIED" operation="file_inherit" class="file"
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="/tmp/lFKMKOMDT4" pid=215195 comm="troff"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=1001000
[Mon Feb 23 18:21:01 2026] audit: type=1400 audit(1771870859.834:8076):
apparmor="DENIED" operation="file_inherit" class="file"
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="/tmp/lFKMKOMDT4" pid=215202 comm="preconv"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=1001000
[Mon Feb 23 18:21:01 2026] audit: type=1400 audit(1771870859.834:8077):
apparmor="DENIED" operation="open" class="file" info="Failed name lookup -
disconnected path" error=-13
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="/usr/bin/man" name="apparmor/.null" pid=215202 comm="preconv"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=0
[Mon Feb 23 18:21:01 2026] audit: type=1400 audit(1771870859.834:8078):
apparmor="DENIED" operation="open" class="file" info="Failed name lookup -
disconnected path" error=-13
namespace="root//lxd-r-intel-dpcpp_<var-snap-lxd-common-lxd>"
profile="man_groff" name="apparmor/.null" pid=215202 comm="preconv"
requested_mask="wr" denied_mask="wr" fsuid=1001000 ouid=0
ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: man-db 2.13.1-1build1
ProcVersionSignature: User Name 6.8.0-100.100-generic 6.8.12
Uname: Linux 6.8.0-100-generic x86_64
ApportVersion: 2.33.1-0ubuntu3
Architecture: amd64
CasperMD5CheckResult: unknown
CloudArchitecture: x86_64
CloudBuildName: server
CloudID: lxd
CloudName: lxd
CloudPlatform: lxd
CloudSerial: 20260209
CloudSubPlatform: LXD socket API v. 1.0 (/dev/lxd/sock)
Date: Mon Feb 23 18:42:55 2026
ProcEnviron:
LANG=C.UTF-8
PATH=(custom, no user)
SHELL=/bin/bash
TERM=screen-256color
XDG_RUNTIME_DIR=<set>
SourcePackage: man-db
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: man-db (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug cloud-image resolute
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2142499
Title:
apparmor denials, and segfaults from man-db binaries
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/man-db/+bug/2142499/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
