New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Apparmor denies access to amdgpu binaries in default profile under Linux Mint 21.3 #898

Open

digitalextremist opened this issue Jul 4, 2024 · 0 comments

digitalextremist commented Jul 4, 2024 •

edited

Loading

On Linux Mint 21.3 with a fresh install, this was spamming my dmesg output:

[44447.432146] audit: type=1400 audit(1720107505.023:8854): apparmor="DENIED" operation="file_mmap" class="file" profile="/usr/bin/redshift" name="/opt/amdgpu/lib/x86_64-linux-gnu/libdrm.so.2.4.0" pid=70637 comm="redshift" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

Saw thousands of this line, with seemingly several a second sometimes.

Needed to add this to the profile for usr.bin.redshift beyond the defaults:

  /opt/amdgpu/lib/x86_64-linux-gnu/* rm,

Not entirely sure this is the best idea, but seemed natural for an application affecting video output to have access to that.

Will be monitoring the effects. All ears if anyone has comments as to why/why-not, or if log suppression is better than permission.

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment