I am on Ubuntu 20.04 desktop and for whatever reasons AppArmor decided to block my Chromium, Epiphany, and Opera browsers (all installed via snaps).
First I went through the kern.log and whitelisted all of the denied items according to the warnings that would appear in my system notification area.
still no luck.. browsers would not open. So from there I completely disabled apparmor and rebooted my machine and browsers still would not open. Its gets confusing when a disable application is still able to block things.
So at this point, I decided to purge apparmor from m system which also uninstalled snapd and all of my browsers.
On the reinstall of my browsers via snap I got this error, which should be impossible since everything was purged:
$ sudo snap install chromium opera
2022-10-26T23:29:48+08:00 INFO Waiting for automatic snapd restart...
error: cannot perform the following tasks:
- Run configure hook of "chromium" snap if present (run hook "configure": error: cannot create transient scope: DBus error "org.freedesktop.DBus.Error.AccessDenied": [An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.154" (uid=0 pid=18964 comm="snap run --hook configure -r unset chromium " label="/usr/bin/snap (enforce)") interface="org.freedesktop.systemd1.Manager" member="StartTransientUnit" error name="(unset)" requested_reply="0" destination="org.freedesktop.systemd1" (uid=0 pid=1 comm="/sbin/init splash " label="unconfined")])
- Run configure hook of "opera" snap if present (run hook "configure": error: cannot create transient scope: DBus error "org.freedesktop.DBus.Error.AccessDenied": [An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.153" (uid=0 pid=18051 comm="snap run --hook configure -r unset opera " label="/usr/bin/snap (enforce)") interface="org.freedesktop.systemd1.Manager" member="StartTransientUnit" error name="(unset)" requested_reply="0" destination="org.freedesktop.systemd1" (uid=0 pid=1 comm="/sbin/init splash " label="unconfined")])
Questions:
Does anyone know why apparmor/snap is blocking itself?
