Ubuntu
apparmor package

apparmor: missing stub hardware directories

Bug #1554803 reported by Mason Loring Bliss on 2016-03-09

62

This bug affects 13 people

Affects		Status	Importance	Assigned to	Milestone
	apparmor (Ubuntu)	Confirmed	Medium	Unassigned

Bug Description

● apparmor.service - LSB: AppArmor initialization
   Loaded: loaded (/etc/init.d/apparmor; bad; vendor preset: enabled)
   Active: failed (Result: exit-code) since Tue 2016-03-08 14:34:04 EST; 4h 23min ago
     Docs: man:systemd-sysv-generator(8)
  Process: 2909 ExecStart=/etc/init.d/apparmor start (code=exited, status=123)

Mar 08 14:34:04 ogre apparmor[2909]: Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
Mar 08 14:34:04 ogre apparmor[2909]: AppArmor parser error for /etc/apparmor.d/usr.bin.webbrowser-app in /etc/apparmor.d/usr.bin.webbrowser-app at line 26: Could not open '/usr/share/apparmor/hardware/graphics.d'
Mar 08 14:34:04 ogre apparmor[2909]: Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
Mar 08 14:34:04 ogre apparmor[2909]: AppArmor parser error for /etc/apparmor.d/usr.bin.webbrowser-app in /etc/apparmor.d/usr.bin.webbrowser-app at line 26: Could not open '/usr/share/apparmor/hardware/graphics.d'
Mar 08 14:34:04 ogre apparmor[2909]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Mar 08 14:34:04 ogre apparmor[2909]: ...fail!
Mar 08 14:34:04 ogre systemd[1]: apparmor.service: Control process exited, code=exited status=123
Mar 08 14:34:04 ogre systemd[1]: Failed to start LSB: AppArmor initialization.
Mar 08 14:34:04 ogre systemd[1]: apparmor.service: Unit entered failed state.
Mar 08 14:34:04 ogre systemd[1]: apparmor.service: Failed with result 'exit-code'.

/usr/share/apparmor/hardware/graphics.d doesn't in fact exist on my system. I'm not sure what package would provide it, but it seems curious to me that the package doesn't supply its relevant apparmor bits. I'd have expected the apparmor package to not complain about bits belonging to packages that aren't installed.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: apparmor 2.10-3ubuntu2
ProcVersionSignature: Ubuntu 4.4.0-11.26-generic 4.4.4
Uname: Linux 4.4.0-11-generic x86_64
NonfreeKernelModules: zfs zunicode zcommon znvpair zavl nvidia_uvm nvidia_modeset nvidia
ApportVersion: 2.20-0ubuntu3
Architecture: amd64
Date: Tue Mar 8 18:53:31 2016
InstallationDate: Installed on 2016-02-24 (13 days ago)
InstallationMedia: Ubuntu-Server 16.04 LTS "Xenial Xerus" - Alpha amd64 (20160219)
ProcEnviron:
TERM=xterm-color
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
ProcKernelCmdline: BOOT_IMAGE=/vmlinuz-4.4.0-11-generic.efi.signed root=/dev/mapper/hostname-root ro net.ifnames=0 biosdevname=0
SourcePackage: apparmor
Syslog: Mar 8 14:34:05 ogre dbus[3062]: [system] AppArmor D-Bus mediation is enabled
UpgradeStatus: No upgrade log present (probably fresh install)

Tags:

Revision history for this message

Mason Loring Bliss (y-mason) wrote on 2016-03-09:

#1

ApparmorPackages.txt Edit (362 bytes, text/plain; charset="utf-8")
ApparmorStatusOutput.txt Edit (1.1 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (2.2 KiB, text/plain; charset="utf-8")
JournalErrors.txt Edit (8.6 KiB, text/plain; charset="utf-8")
KernLog.txt Edit (3.1 KiB, text/plain; charset="utf-8")
PstreeP.txt Edit (3.4 KiB, text/plain; charset="utf-8")

Revision history for this message

Steve Beattie (sbeattie) wrote on 2016-03-09:

#2

Thanks for taking the time to report this issue and help improve Ubuntu. This specific issue is a duplicate of https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1511439 which I believe has been addressed by the webbrowser-app package in 16.04.

However, I'm not marking it as such as it seems to me that making each desktop package that wants to ship "converged" policies have to include stub apparmor directories seems... inefficient at best, and that perhaps the apparmor packaging should provide these directories, that can be populated by apparmor-easyprof-ubuntu as needed (or not).

Changed in apparmor (Ubuntu):
status:	New → Confirmed
importance:	Undecided → Medium
summary:	- apparmor throwing inexplicable errors + apparmor: missing stub hardware directories

Revision history for this message

Mason Loring Bliss (y-mason) wrote on 2016-03-09:

#3

That seems like a reasonable approach.

Revision history for this message

xtrchessreal (xtrchessreal) wrote on 2016-05-04:

#4

I have the exact output (I'm also running 16.04 upgraded from 15.10) the originator published. If it was fixed in webbrowser-app package 16.04 then this would not be seen in 16.04. I agree this bug should be left open. I looked everywhere on AskUbuntu etc before finally asking and was referred to this bug. Thanks for your time and effort. :)

How do I apply the apparmor-easyprof-ubuntu package?
Is this a workaround or the fix?
Should I remove and purge the current apparmor etc packages then reinstall?
I also invite any here to post the proper steps to the answer to my question on AskUbuntu: http://askubuntu.com/questions/767272/apparmor-init-failed-exit-code-123/767686#767686

Once again thank you for your effort and time please let me know if there is anything I can provide to help. :)

Revision history for this message

Seth Arnold (seth-arnold) wrote on 2016-05-05:

#5

xtrchessreal,l I think the easiest way forward for you is:
apt-get install apparmor-easyprof-ubuntu

I'm surprised this is still happening though. Can you paste the output of:
dpkg -l webbrowser-app | cat
and
dpkg -S /usr/share/apparmor/hardware/video.d

Thanks

Revision history for this message

xtrchessreal (xtrchessreal) wrote on 2016-05-05:

#6

Seth, Thanks for your effort and input to my question. Here is the output you requested :)

x@x-NICEPUTER:~$ dpkg -l webbrowser-app | cat
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============-============================-============-=================================
rc webbrowser-app 0.23+16.04.20160413-0ubuntu1 amd64 Ubuntu web browser
x@x-NICEPUTER:~$ dpkg -S /usr/share/apparmor/hardware/video.d
dpkg-query: no path found matching pattern /usr/share/apparmor/hardware/video.d
x@x-NICEPUTER:~$

Lemme know if there is anything else I can do
Thanks

Revision history for this message

xtrchessreal (xtrchessreal) wrote on 2016-05-05:

#7

fyi after install of apparmor-easyprof-ubuntu:

x@x-NICEPUTER:~$ dpkg -l webbrowser-app | cat
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-==============-============================-============-=================================
rc webbrowser-app 0.23+16.04.20160413-0ubuntu1 amd64 Ubuntu web browser

x@x-NICEPUTER:~$ dpkg -S /usr/share/apparmor/hardware/audio.d
apparmor-easyprof-ubuntu: /usr/share/apparmor/hardware/audio.d
x@x-NICEPUTER:~$ dpkg -S /usr/share/apparmor/hardware/graphics.d
apparmor-easyprof-ubuntu: /usr/share/apparmor/hardware/graphics.d
x@x-NICEPUTER:~$ dpkg -S /usr/share/apparmor/hardware/video.d
apparmor-easyprof-ubuntu: /usr/share/apparmor/hardware/video.d

Thanks again and lemme know :)

Revision history for this message

Jeferson Nogueira (jefnog) wrote on 2017-10-12:

#8

I was install apparmor-easyprof-ubuntu in 17.10 artfull. Solved . Thank you for your effort and time to report this issue.

Revision history for this message

Alexander Fomichev (fomichev-alexander) wrote on 2018-07-12:

#9

Ubuntu 16.04
Same issue happened to me after updates. Apparmor failure with code 123 prevents system from booting.
These directories were created manually in recovery single mode:
mkdir -p /usr/share/apparmor/hardware/graphics.d
mkdir -p /usr/share/apparmor/hardware/audio.d
mkdir -p /usr/share/apparmor/hardware/video.d

but it made no effect.

After that:
apt-get install apparmor-easyprof-ubuntu

System booted up successfully.

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.