Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions

To: Rene Engelhard <rene@debian.org>
Cc: 884747@bugs.debian.org, control@bugs.debian.org
Subject: Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
From: Joey Hess <id@joeyh.name>
Date: Tue, 19 Dec 2017 11:44:53 -0400
Message-id: <[🔎] 20171219154453.GA17634@kitenet.net>
Reply-to: Joey Hess <id@joeyh.name>, 884747@bugs.debian.org
In-reply-to: <[🔎] 20171219151535.GA19253@kitenet.net>
References: <[🔎] 20171219025604.GA1315@kitenet.net> <[🔎] 20171219092319.GA924@rene-engelhard.de> <[🔎] 20171219151535.GA19253@kitenet.net> <[🔎] 20171219025604.GA1315@kitenet.net>

Aha, it's apparmor breaking this.

Dec 19 11:42:34 darkstar audit[17560]: AVC apparmor="DENIED" operation="open" profile="libreoffice-oopslash" name="/sys/devices/pci0000:00/0000:00:1f.2/ata2/host1/target1:0:0/1:0:0:0/block/sda/queue/rotational" pid=17560 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.481:1329): apparmor="DENIED" operation="open" profile="libreoffice-oopslash" name="/sys/devices/pci0000:00/0000:00:1f.2/ata2/host1/target1:0:0/1:0:0:0/block/sda/queue/rotational" pid=17560 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17578]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17578]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17578]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17578]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.794:1330): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.794:1331): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.794:1332): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.794:1333): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17578]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.801:1334): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.801:1335): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17578]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=17578 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/buildid" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/buildid" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.806:1336): apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/buildid" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.806:1337): apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/buildid" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/shared/lastsynchronized" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.component.PackageRegistryBackend/unorc" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/lu16409dr4b0n.tmp/OptionsDialog.xcu" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/lu16409dr4b0q.tmp/Paths.xcu" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/lu16409dr4b0o.tmp/Filter.xcu" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/configmgr.ini" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/extensions.pmap" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/lastsynchronized" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar kernel: audit: type=1400 audit(1513698154.810:1338): apparmor="DENIED" operation="unlink" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/shared/lastsynchronized" pid=17577 comm="soffice.bin" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/buildid" pid=17577 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.component.PackageRegistryBackend/unorc" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/dconf/user" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/configmgr.ini" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/configmgr.ini" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.configuration.PackageRegistryBackend/configmgr.ini" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/registrymodifications.xcu" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/autotext/mytexts.bau" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/config/autotbl.fmt" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/basic/Standard/Module1.xba" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/basic/Standard/dialog.xlb" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/basic/Standard/script.xlb" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/basic/script.xlc" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/basic/dialog.xlc" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_dest" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/database/biblio.odb.osl-tmp" pid=17577 comm="soffice.bin" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_dest" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/database/biblio/biblio.dbf.osl-tmp" pid=17577 comm="soffice.bin" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/database/biblio/biblio.dbt" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_dest" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/database/evolocal.odb.osl-tmp" pid=17577 comm="soffice.bin" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/gallery/sg30.sdv" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="rename_src" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/gallery/sg30.thm" pid=17577 comm="soffice.bin" requested_mask="wrd" denied_mask="wrd" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/user-dirs.dirs" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/user-dirs.dirs" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/.lock" pid=17577 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/.lock" pid=17577 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/.lock" pid=17577 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Dec 19 11:42:34 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/gtk-3.0/settings.ini" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:35 darkstar audit[17577]: AVC apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/uno_packages/cache/stamp.sys" pid=17577 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
Dec 19 11:42:35 darkstar audit[17577]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/extensions/bundled/registry/com.sun.star.comp.deployment.component.PackageRegistryBackend/unorc" pid=17577 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Dec 19 11:42:35 darkstar audit[17577]: AVC apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/joey/.etc/.config/libreoffice/4/user/3gsOrc" pid=17577 comm="configmgrWriter" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

-- 
see shy jo

Attachment: signature.asc
Description: PGP signature

Reply to:

Follow-Ups:
- Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
  - From: Rene Engelhard <rene@debian.org>

References:
- Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
  - From: Joey Hess <id@joeyh.name>
- Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
  - From: Rene Engelhard <rene@debian.org>
- Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
  - From: Joey Hess <id@joeyh.name>

Prev by Date: Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
Next by Date: Bug#884747: Info received (Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions)
Previous by thread: Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
Next by thread: Bug#884747: fails to start when .config is a symlink, with misleading error message about permissions
Index(es):
- Date
- Thread