Bug#1113713: libreoffice: LibreOffice fails to start on Trixie when AppArmor is active

[Michael Hierweck <michael@hierweck.de>]

Hi,

On 01.09.25 18:03, Rene Engelhard wrote:
> Hi,
>
> Am 01.09.25 um 13:35 schrieb Michael Hierweck:
> > After upgrading to Debian Trixie LibreOffice cannot be started by invoking
> > the "libreoffice" command when AppArmor is enabled.
>
> Did you edit them to enable it? Since per default they are in complain mode...

No, I did not edit anything manually.

I just disabled apparmor at kernel command line level (for testing), then LibreOffice started 
up cleanly.

However, I found out that LibreOffice actually was in enforce mode:

# aa-status  |egrep 'mode|libreoffice'
55 profiles are in enforce mode.
   libreoffice-oosplash
   libreoffice-senddoc
   libreoffice-xpdfimport
45 profiles are in complain mode.
0 profiles are in prompt mode.
0 profiles are in kill mode.
76 profiles are in unconfined mode.
7 processes are in enforce mode.
5 processes are in complain mode.
0 processes are in prompt mode.
0 processes are in kill mode.
0 processes are in mixed mode.

(Btw. is any more convenient way to query?)

I cannot explain how this happenend while upgrading about ten desktops and notebooks from 
Bookworm to Trixie. *strange*

So I explicitly switched to complain mode:

# aa-complain /usr/lib/libreoffice/program/oosplash
Setting /usr/lib/libreoffice/program/oosplash to complain mode.
Warning: profile libreoffice-oosplash represents multiple programs
Warning: profile libreoffice-oosplash represents multiple programs

# aa-complain /usr/lib/libreoffice/program/senddoc
Setting /usr/lib/libreoffice/program/senddoc to complain mode.
Warning: profile libreoffice-senddoc represents multiple programs
Warning: profile libreoffice-senddoc represents multiple programs

# aa-complain /usr/lib/libreoffice/program/xpdfimport
Setting /usr/lib/libreoffice/program/xpdfimport to complain mode.
Warning: profile libreoffice-xpdfimport represents multiple programs
Warning: profile libreoffice-xpdfimport represents multiple programs

# aa-status  |egrep 'mode|libreoffice'
52 profiles are in enforce mode.
48 profiles are in complain mode.
   libreoffice-oosplash
   libreoffice-senddoc
   libreoffice-xpdfimport
0 profiles are in prompt mode.
0 profiles are in kill mode.
76 profiles are in unconfined mode.
7 processes are in enforce mode.
5 processes are in complain mode.
0 processes are in prompt mode.
0 processes are in kill mode.
0 processes are in mixed mode.

Nevertheless I did not work:

$ libreoffice
ERROR 4 forking process

Sorry, I really have no idea what's going on here.

Michael