Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #240106

Re: Debian 11: evince and apparmor flood kernel log

Show all headers | View raw

On Sat, 18 Sep 2021, Klaus Singvogel wrote:

> Roger Price wrote:
>> In Debian 11, evince has an appamor profile which floods the kernel log with
>> hundreds of messages of the style:
>
> Not only at Debian 11, even Debian 10 has it.
>
> [...]
>>  (evince:2869): GVFS-WARNING **: 22:18:18.510: can't init metadata tree /mnt/home/rprice/.local/share/gvfs-metadata/home: open: Permission denied
> [...]
>> Is there some way of calming evince+appamor?
>
> The location of your home is uncommon (as on my side).
>
> Fix: edit /etc/apparmor.d/tunables/home.d/site.local

In site.local I found

  # The following is a space-separated list of where additional user home
  # directories are stored, each must have a trailing '/'. Directories added
  # here are appended to @{HOMEDIRS}.  See tunables/home for details. Eg:
  #@{HOMEDIRS}+=/srv/nfs/home/ /mnt/home/

where curiously, the apparmor installation seems to have detected my non-common 
/home and made the necessary addition, but appended to a commented out example.

I added line /mnt/home/ and tried to restart apparmor.service.  This failed with 
error messages such as

Sep 18 12:08:33 titan apparmor.systemd[5150]: AppArmor parser error for
  /etc/apparmor.d/lsb_release in /etc/apparmor.d/tunables/multiarch at line 13:
  syntax error
Sep 18 12:08:33 titan apparmor.systemd[5154]: AppArmor parser error for
  /etc/apparmor.d/nvidia_modprobe in /etc/apparmor.d/tunables/multiarch at line
  13: syntax error

So I tried replacing @{HOMEDIRS}=/home/ with @{HOMEDIRS}=/mnt/home/ in file 
/etc/apparmor.d/tunables/home

I restarted apparmor.service and some light testing shows that the problem is 
solved.

My error in site.local was probably to have added /mnt/home and not 
@{HOMEDIRS}+=/mnt/home

Thanks to all who responded!  Roger

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Debian 11: evince and apparmor flood kernel log Roger Price <debian@rogerprice.org> - 2021-09-17 23:00 +0200
  Re: Debian 11: evince and apparmor flood kernel log Reco <recoverym4n@enotuniq.net> - 2021-09-17 23:20 +0200
  Re: Debian 11: evince and apparmor flood kernel log Klaus Singvogel <deb-user-ml@singvogel.net> - 2021-09-18 01:10 +0200
    Re: Debian 11: evince and apparmor flood kernel log Roger Price <debian@rogerprice.org> - 2021-09-18 13:00 +0200
      Re: Debian 11: evince and apparmor flood kernel log Greg Wooledge <greg@wooledge.org> - 2021-09-18 14:50 +0200
        Re: Debian 11: evince and apparmor flood kernel log David Wright <deblis@lionunicorn.co.uk> - 2021-09-19 07:00 +0200

csiph-web