debcrafters-packages team mailing list archive

[Ryan Lee <2106675@xxxxxxxxxxxxxxxxxx>]

We have received multiple reports of remmina breakage caused by an
incomplete AppArmor profile, and we are planning to pull the profile
from Plucky entirely. Please see
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2107723 and
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2110236 for more
information.

** Changed in: apparmor (Ubuntu)
       Status: Confirmed => In Progress

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to remmina in Ubuntu.
https://bugs.launchpad.net/bugs/2106675

Title:
  apparmor prevents access to saved Remmina sessions

Status in apparmor package in Ubuntu:
  In Progress
Status in remmina package in Ubuntu:
  Triaged

Bug description:
  After upgrading to 25.04 (beta), my saved connections / target
  computers in Remmina were gone. Where previously I had several saved
  connection entries, there were none.

  I modified /etc/apparmor.d/remmina to run with flags=(complain), re-
  launched, and all my saved connections were back.

  Subsequently running aa-logprof suggested the following additions:
  include <abstractions/bash>
  include <abstractions/dbus-session>
  /etc/debian_version r,
  /etc/lsb-release r,
  /usr/bin/dash ix,
  /usr/bin/lsb_release mrix,
  /usr/bin/python3.13 mrix,
  @{etc_ro}/fstab r,
  owner @{HOME}/.remmina/ r,
  owner @{HOME}/.remmina/* r,

  
  (I replaced /home/*/ with ${HOME}.)

  It seems likely it's possible to avoid the dbus-session include (I see
  dbus-session-strict was already present), but there were many manual
  rules it was requesting without that, and I don't know enough about
  remmina, apparmor, or dbus to offer useful input there.

  It seems quite possible that only the @{HOME}/.remmina/(*) rules are
  needed to fix this, but the numerous complaints about accesses to
  DBus.Properties /org/freedesktop/secrets/collection/login/... paths
  seems like this rule [ dbus (send) bus=session
  path="/org/freedesktop/secrets/collection/login"
  interface="org.freedesktop.DBus.Properties" member=GetAll
  peer=(label=unconfined), ] might not be working as expected, and I'm
  suspicious they're related to loading these saved connections.


  Please give us some details about the systems you are using:
  * Client (OS name and version): Ubuntu 25.04 Plucky Puffin (development branch), amd64
  * Remmina version (remmina --version): org.remmina.Remmina - 1.4.39 (git n/a) (dpkg: 1.4.39+dfsg-1)
  * Desktop environment (GNOME, Unity, KDE, ..): Gnome

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2106675/+subscriptions