On Mon, 7 Jan 2019 20:46:28 +0700 Tunggul Arif Siswoyo <tunggul@ptdes.net> wrote:
[skip]
I think it is related with apparmor configs. I'm not sure what caused it
though. This is in my machine:
root@ikigai:~# aa-status
apparmor module is loaded.
18 profiles are loaded.
17 profiles are in enforce mode.
/usr/bin/evince
/usr/bin/evince-previewer
/usr/bin/evince-previewer//sanitized_helper
/usr/bin/evince-thumbnailer
/usr/bin/evince//sanitized_helper
/usr/bin/man
/usr/lib/cups/backend/cups-pdf
/usr/lib/ipsec/charon
/usr/lib/ipsec/stroke
/usr/sbin/cups-browsed
/usr/sbin/cupsd
/usr/sbin/cupsd//third_party
firejail-default
libreoffice-senddoc
libreoffice-xpdfimport
man_filter
man_groff
1 profiles are in complain mode.
libreoffice-oopslash
3 processes have profiles defined.
3 processes are in enforce mode.
/usr/lib/ipsec/charon (739)
/usr/sbin/cups-browsed (563)
/usr/sbin/cupsd (528)
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.
root@ikigai:~# /etc/init.d/apparmor status
● apparmor.service - Load AppArmor profiles
Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Mon 2019-01-07 20:13:09 WIB; 50min ago
Docs: man:apparmor(7)
https://gitlab.com/apparmor/apparmor/wikis/home/
Process: 430 ExecStart=/etc/init.d/apparmor start (code=exited, status=123)
Main PID: 430 (code=exited, status=123)
Jan 07 20:13:09 ikigai systemd[1]: Starting Load AppArmor profiles...
Jan 07 20:13:09 ikigai apparmor[430]: Starting AppArmor profiles:AppArmor parser error for /etc/apparmor.d in /etc/apparmor.d/usr.lib.libreoffice.program.soffice…ractions/mesa'
Jan 07 20:13:09 ikigai apparmor[430]: AppArmor parser error for /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin in /etc/apparmor.d/usr.lib.libreoffice.pr…ractions/mesa'
Jan 07 20:13:09 ikigai apparmor[430]: failed!
Jan 07 20:13:09 ikigai systemd[1]: apparmor.service: Main process exited, code=exited, status=123/n/a
Jan 07 20:13:09 ikigai systemd[1]: apparmor.service: Failed with result 'exit-code'.
Jan 07 20:13:09 ikigai systemd[1]: Failed to start Load AppArmor profiles.
Hint: Some lines were ellipsized, use -l to show in full.
Error message above caused by invalid config in apparmor profile for
soffice.bin in line 90 :
root@ikigai:~# aa-remove-unknown
AppArmor parser error for /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin in /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin at line 90: Could not open 'abstrac
tions/mesa'
Warning: Profile directory '/var/lib/snapd/apparmor/profiles' not found
After removing line 90:
...
#include <abstractions/mesa>
...
apparmor is working again and libreoffice starting normally.
--
tunggul