[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#985080: marked as done (Akonadi server crashes because of Apparmor rules)

Your message dated Mon, 05 Apr 2021 11:34:01 +0000
with message-id <E1lTNUX-0003sx-9c@fasolo.debian.org>
and subject line Bug#985080: fixed in akonadi 4:20.08.3-2
has caused the Debian Bug report #985080,
regarding Akonadi server crashes because of Apparmor rules
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
985080: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985080
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: akonadi-server
Version: 4:20.08.3-1

Hi,

the Akonadi server permanently crashes on login after upgrading to Bullseye.

There are several Apparmor messages in the log:

Mär 12 18:01:27 mcp kernel: audit: type=1400 audit(1615568487.152:30): 
apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/
proc/2411/fd/" pid=2411 comm="QDBusConnection" requested_mask="r" 
denied_mask="r" fsuid=1000 ouid=1000
Mär 12 18:01:27 mcp kernel: audit: type=1400 audit(1615568487.152:31): 
apparmor="DENIED" operation="exec" profile="/usr/bin/akonadiserver" name="/usr/
bin/dbus-launch" pid=2411 comm="QDBusConnection" requested_mask="x" 
denied_mask="x" fsuid=1000 ouid=0
Mär 12 18:01:27 mcp kernel: audit: type=1400 audit(1615568487.152:32): 
apparmor="DENIED" operation="exec" profile="/usr/bin/akonadiserver" name="/usr/
bin/dbus-launch" pid=2411 comm="QDBusConnection" requested_mask="x" 
denied_mask="x" fsuid=1000 ouid=0
Mär 12 18:01:27 mcp kernel: audit: type=1400 audit(1615568487.152:33): 
apparmor="DENIED" operation="exec" profile="/usr/bin/akonadiserver" name="/usr/
bin/dbus-launch" pid=2411 comm="QDBusConnection" requested_mask="x" 
denied_mask="x" fsuid=1000 ouid=0
Mär 12 17:21:29 mcp kernel: audit: type=1400 audit(1615566089.522:31): 
apparmor="DENIED" operation="signal" profile="/usr/bin/akonadiserver" pid=2292 
comm="akonadiserver" requested_mask="send" denied_mask="send" signal=term 
peer="unconfined"
Mär 12 17:21:32 mcp kernel: audit: type=1400 audit(1615566092.526:32): 
apparmor="DENIED" operation="signal" profile="/usr/bin/akonadiserver" pid=2292 
comm="akonadiserver" requested_mask="send" denied_mask="send" signal=kill 
peer="unconfined"
Mär 12 17:37:16 mcp kernel: audit: type=1400 audit(1615567036.308:30): 
apparmor="DENIED" operation="open" profile="/usr/bin/akonadiserver" name="/usr/
local/share/mime/mime.cache" pid=3791 comm=5468726561642028706F6F6C656429 
requested_mask="r" denied_mask="r"  fsuid=100

So that I can write e-mails again, I first added the missing include for user 
additions in the /etc/apparmor.d/usr.bin.akonadiserver file:

  # Site-specific additions and overrides. See local/README for details.
  #include <local/usr.bin.akonadiserver>

Subsequently, I have fixed the above messages with the following additions in /
etc/apparmor.d/local/usr.bin.akonadiserver, so that the Akonadi server is now 
running again:

/usr/bin/dbus-launch ix,
/usr/local/share/mime/mime.cache r,
@{PROC}/@{pid}/fd/ r,
@{HOME}/.Xauthority r,
signal send set=term peer=unconfined,
signal send set=kill peer=unconfined,

It would be good if the Apparmor rules of the Akonadi server were functional. 
In the current state, the Akonadi server is unfortunately not usable without 
user adjustments.

Please fix the apparmor rules. Thanks a lot.

With kind regards

--- End Message ---
--- Begin Message --- 
Source: akonadi
Source-Version: 4:20.08.3-2
Done: Sandro Knauß <hefee@debian.org>

We believe that the bug you reported is fixed in the latest version of
akonadi, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 985080@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sandro Knauß <hefee@debian.org> (supplier of updated akonadi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 05 Apr 2021 13:09:40 +0200
Source: akonadi
Architecture: source
Version: 4:20.08.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian/Kubuntu Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Sandro Knauß <hefee@debian.org>
Closes: 985080
Changes:
 akonadi (4:20.08.3-2) unstable; urgency=medium
 .
   * Add upstream patch to load local apparmor rules (Closes: #985080).
Checksums-Sha1:
 d65819dee9cd976bdb4c5c6662a8e0bde56715b8 4032 akonadi_20.08.3-2.dsc
 ee53e43e61a6310f3e1b3443f5676e001651b3c2 29852 akonadi_20.08.3-2.debian.tar.xz
 b4b707ea3947403cc58d73d49ca0263332e3a052 18755 akonadi_20.08.3-2_source.buildinfo
Checksums-Sha256:
 92ce72813ea0abb18030be00395e643cbe4a51676c3900ac6c41e8f53f9124c4 4032 akonadi_20.08.3-2.dsc
 0ae92434b68ec2d6ec14f536a7452864500945f6b01dc71ffdfed1e2c02ecd4d 29852 akonadi_20.08.3-2.debian.tar.xz
 7a735657feed77c802dac7b0551e08b24f365ec0336fa4cea243eb01837c802e 18755 akonadi_20.08.3-2_source.buildinfo
Files:
 f882e1581d45b893049ace559387eef3 4032 libs optional akonadi_20.08.3-2.dsc
 635e2b0781a5b2af7286ba664f441c65 29852 libs optional akonadi_20.08.3-2.debian.tar.xz
 8ab15dc0f2ac9b8d9a5b6b7ac4e798eb 18755 libs optional akonadi_20.08.3-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJFBAEBCgAvFiEEOewRoCAWtykmSRoG462wCFBgVjYFAmBq8AcRHGhlZmVlQGRl
Ymlhbi5vcmcACgkQ462wCFBgVjYtDBAAlhVE1CUVUMcg1h8pk32rK8AlxK/rTv/+
7aQbLyJjyiNopnN6wLztSiu/tlJQUtfIrEzkmy0AP1xqqFly2mQhVNb9ljTghTJq
+adSBJ3RQ3N1e0/leO1CUvfmry+lwnwDpmVhZvQWMcRB96Kn5kSCJcWUNTpZWpBu
7ssSfrwdHoqzG2g3UpEfkrKuBgvcmZ1yusHmhDByF1i/lbreOoU1hskhdDP+U0xv
l2dF+YpSMBmpXgNK45QNPlupZeErAXcxBwsD9JntiA11INMtCTj/Y3EvmVGFB1Wl
bFrJ3D6E9ghb15d0ITOnRWCk2jLJcEpx88y18IqwybWJKDf8CGNrJm3JWbBkxTT9
b7AF9xvTNI9lIoBHIZlbt72taqWeQ1Ib+ANhmNvFun7Et7MNjFC8qHBOsE0p5sLe
OgBjGcvnhjr18AmZuB/Pz0U8yaf5chhFTk1g3hbz1wv5ggn5AfWbQk/mJox/uI8A
cU020bIs53Fl/A93Q5diAKhRi7fNC99deQjxnib7o68yoiT84D05pAbyetkae1e9
SO1pn8cTkmmpQ6diWsRVOB1RoN9XvtT6OmPGM2SevK+43W5bOquGLgcns/wygjOw
x5lRyC2CPQU9twZgJzgmPeV0/t/6uqUfu68sS+fP16cv8GaqhK4TLJJmud4+oR0n
q0SSS0A+xQY=
=7mQU
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: