DBus-broker vs. AppArmor

Project Discussion Pre-Release Discussion
1

I noticed that after the switch to dbus-broker today, mounting luks volumes from plasmashell no longer works:

Jul 26 16:32:09 H510 dbus-broker[5396]: apparmor=“DENIED” operation=“dbus_method_call” bus=“session” path=“/org/kde/solid/UDisks2StorageAccess_14” interface=“” member=“passphraseReply” mask=“receive” name=“:1.33” label>
Jul 26 16:32:09 H510 dbus-broker[5396]: A security policy denied :1.33 to send method call /org/kde/solid/UDisks2StorageAccess_14:(null).passphraseReply to :1.40.

Tried putting an exception in the aa policies, but it didn’t seem to work.. set every policy in apparmor.d to complain mode, reloaded aa, and am still seeing the error? Not sure what I’m missing here…

2

I assume you are on 26.10?

I highly recommend filing a bug report since this is still in early development:

ubuntu-bug apparmor

3

I haven’t filed a bug yet because I suspect they are probably already planning to release new apparmor profiles to address it (and this is just a devel package release timing issue that won’t affect the actual release in October). But, if it’s not fixed in the next apparmor update, I will definitely be filing an issue.

Until then, I was just surprised setting aa-complain did not work and was trying to figure out the proper way to temporarily bypass it. Will look into it more when I have time next weekend.

Edit: Sure enough, they released new profiles today that fixed it.

1 Like
4

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.