Failed to start Load AppArmor profiles

san7 · December 2, 2019, 1:45pm

Apparmor issue - Failed to start Load AppArmor profiles during boot but it seems that apparmor has been loaded (somehow)

What version of Parrot are you running? (include version (e.g. 4.6), edition:

MATE

What method did you use to install Parrot?
Debian Standard

Configured to multiboot with other systems?
NO

If there are any similar issues or solutions, link to them below:
googled a lot but was not able to find a solution

If there are any error messages or relevant logs, post them below:

➜  ~ systemctl status apparmor -l

● apparmor.service - Load AppArmor profiles
   Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Mon 2019-12-02 14:01:32 CET; 9min ago
     Docs: man:apparmor(7)
           https://gitlab.com/apparmor/apparmor/wikis/home/
 Main PID: 624 (code=exited, status=1/FAILURE)

Dec 02 14:01:32 r0t apparmor.systemd[624]: Restarting AppArmor
Dec 02 14:01:32 r0t apparmor.systemd[624]: Reloading AppArmor profiles
Dec 02 14:01:32 r0t apparmor.systemd[624]: AppArmor parser error for /etc/apparmor.d in /etc/apparmor.d/key.key at line 1: Found unexpected character: '-'
Dec 02 14:01:32 r0t apparmor.systemd[624]: AppArmor parser error for /etc/apparmor.d/key.key in /etc/apparmor.d/key.key at line 1: Found unexpected character: '-'
Dec 02 14:01:32 r0t apparmor.systemd[624]: Error: At least one profile failed to load
Dec 02 14:01:32 r0t systemd[1]: apparmor.service: Main process exited, code=exited, status=1/FAILURE
Dec 02 14:01:32 r0t systemd[1]: apparmor.service: Failed with result 'exit-code'.
Dec 02 14:01:32 r0t systemd[1]: Failed to start Load AppArmor profiles.

➜  ~ sudo aa-status --enabled ; echo $?
0

➜  ~ sudo apparmor_status

apparmor module is loaded.
55 profiles are loaded.
38 profiles are in enforce mode.
   /home/m1l31/snap
   /usr/bin/evince
   /usr/bin/evince-previewer
   /usr/bin/evince-previewer//sanitized_helper
   /usr/bin/evince-thumbnailer
   /usr/bin/evince//sanitized_helper
   /usr/bin/man
   /usr/bin/onioncircuits
   /usr/bin/ricochet
   /usr/lib/cups/backend/cups-pdf
   /usr/lib/ipsec/charon
   /usr/lib/ipsec/stroke
   /usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session
   /usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session//chromium
   /usr/sbin/cups-browsed
   /usr/sbin/cupsd
   /usr/sbin/cupsd//third_party
   /usr/sbin/haveged
   /usr/sbin/ntpd
   /usr/sbin/tcpdump
   firejail-default
   libreoffice-senddoc
   libreoffice-soffice//gpg
   libreoffice-xpdfimport
   lsb_release
   man_filter
   man_groff
   nvidia_modprobe
   nvidia_modprobe//kmod
   system_tor
   thunderbird
   thunderbird//browser_java
   thunderbird//browser_openjdk
   thunderbird//gpg
   thunderbird//sanitized_helper
   torbrowser_firefox
   torbrowser_plugin_container
   torbrowser_tor
17 profiles are in complain mode.
   /usr/sbin/dnsmasq
   /usr/sbin/dnsmasq//libvirt_leaseshelper
   avahi-daemon
   identd
   klogd
   libreoffice-oopslash
   libreoffice-soffice
   mdnsd
   nmbd
   nscd
   ping
   smbd
   smbldap-useradd
   smbldap-useradd///etc/init.d/nscd
   syslog-ng
   syslogd
   traceroute
7 processes have profiles defined.
7 processes are in enforce mode.
   /usr/sbin/haveged (996) 
   /usr/lib/firefox/firefox (2658) firejail-default
   /usr/lib/firefox/firefox (2715) firejail-default
   /usr/lib/firefox/firefox (2760) firejail-default
   /usr/lib/firefox/firefox (2828) firejail-default
   /usr/lib/firefox/firefox (3432) firejail-default
   /usr/lib/firefox/firefox (3475) firejail-default
0 processes are in complain mode.
0 processes are unconfined but have a profile defined.

➜  ~ cat /var/log/syslog | grep apparmor

Dec  2 14:01:32 localhost apparmor.systemd[624]: Restarting AppArmor
Dec  2 14:01:32 localhost apparmor.systemd[624]: Reloading AppArmor profiles
Dec  2 14:01:32 localhost apparmor.systemd[624]: AppArmor parser error for /etc/apparmor.d in /etc/apparmor.d/key.key at line 1: Found unexpected character: '-'
Dec  2 14:01:32 localhost apparmor.systemd[624]: AppArmor parser error for /etc/apparmor.d/key.key in /etc/apparmor.d/key.key at line 1: Found unexpected character: '-'
Dec  2 14:01:32 localhost apparmor.systemd[624]: Error: At least one profile failed to load
Dec  2 14:01:32 localhost systemd[1]: apparmor.service: Main process exited, code=exited, status=1/FAILURE
Dec  2 14:01:32 localhost systemd[1]: apparmor.service: Failed with result 'exit-code'.
Dec  2 14:01:32 localhost kernel: [   26.676516] audit: type=1400 audit(1575291692.517:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="torbrowser_plugin_container" pid=646 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.678079] audit: type=1400 audit(1575291692.521:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/onioncircuits" pid=648 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.678242] audit: type=1400 audit(1575291692.521:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session" pid=644 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.678244] audit: type=1400 audit(1575291692.521:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session//chromium" pid=644 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.678412] audit: type=1400 audit(1575291692.521:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-xpdfimport" pid=652 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.678908] audit: type=1400 audit(1575291692.521:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="system_tor" pid=645 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.679429] audit: type=1400 audit(1575291692.521:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="torbrowser_tor" pid=647 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.680026] audit: type=1400 audit(1575291692.521:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libreoffice-oopslash" pid=650 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.680481] audit: type=1400 audit(1575291692.521:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/haveged" pid=657 comm="apparmor_parser"
Dec  2 14:01:32 localhost kernel: [   26.680739] audit: type=1400 audit(1575291692.521:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=656 comm="apparmor_parser"
➜  ~

Has someone any suggestions?
Also read https://docs.parrotlinux.org/info/apparmor/ guide and enabled aa-notfiy but so far

type=AVC msg=audit(1575291994.325:190): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lsb_release" pid=2950 comm="apparmor_parser"
type=AVC msg=audit(1575291994.357:191): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="nvidia_modprobe" pid=2953 comm="apparmor_parser"
type=AVC msg=audit(1575291994.389:192): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="nvidia_modprobe//kmod" pid=2953 comm="apparmor_parser"
type=AVC msg=audit(1575291994.941:193): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-senddoc" pid=3054 comm="apparmor_parser"
type=AVC msg=audit(1575291994.961:194): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-oopslash" pid=3053 comm="apparmor_parser"
type=AVC msg=audit(1575291994.977:195): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-xpdfimport" pid=3055 comm="apparmor_parser"
type=AVC msg=audit(1575291994.985:196): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="torbrowser_tor" pid=3050 comm="apparmor_parser"
type=AVC msg=audit(1575291995.037:197): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="system_tor" pid=3048 comm="apparmor_parser"
type=AVC msg=audit(1575291995.041:198): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/haveged" pid=3059 comm="apparmor_parser"
type=AVC msg=audit(1575291995.069:199): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cups-browsed" pid=3056 comm="apparmor_parser"
type=AVC msg=audit(1575291995.077:200): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/ntpd" pid=3058 comm="apparmor_parser"
type=AVC msg=audit(1575291995.081:201): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session" pid=3047 comm="apparmor_parser"
type=AVC msg=audit(1575291995.117:202): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/onioncircuits" pid=3051 comm="apparmor_parser"
type=AVC msg=audit(1575291995.133:203): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session//chromium" pid=3047 comm="apparmor_parser"
type=AVC msg=audit(1575291995.137:204): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/ricochet" pid=3052 comm="apparmor_parser"
type=AVC msg=audit(1575291995.145:205): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/man" pid=3062 comm="apparmor_parser"
type=AVC msg=audit(1575291995.145:206): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_filter" pid=3062 comm="apparmor_parser"
type=AVC msg=audit(1575291995.145:207): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_groff" pid=3062 comm="apparmor_parser"
type=AVC msg=audit(1575291995.161:208): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/ipsec/stroke" pid=3064 comm="apparmor_parser"
type=AVC msg=audit(1575291995.177:209): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="firejail-default" pid=3068 comm="apparmor_parser"
type=AVC msg=audit(1575291995.185:210): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/tcpdump" pid=3063 comm="apparmor_parser"
type=AVC msg=audit(1575291995.189:211): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lsb_release" pid=3071 comm="apparmor_parser"
type=AVC msg=audit(1575291995.189:212): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="nvidia_modprobe" pid=3072 comm="apparmor_parser"
type=AVC msg=audit(1575291995.189:212): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="nvidia_modprobe//kmod" pid=3072 comm="apparmor_parser"
type=AVC msg=audit(1575291995.209:213): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/home/m1l31/snap" pid=3069 comm="apparmor_parser"
type=AVC msg=audit(1575291995.217:214): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="torbrowser_plugin_container" pid=3049 comm="apparmor_parser"
type=AVC msg=audit(1575291995.245:215): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/ipsec/charon" pid=3065 comm="apparmor_parser"
type=AVC msg=audit(1575291995.273:216): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="klogd" pid=3074 comm="apparmor_parser"
type=AVC msg=audit(1575291995.329:217): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="ping" pid=3073 comm="apparmor_parser"
type=AVC msg=audit(1575291995.353:218): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="syslog-ng" pid=3075 comm="apparmor_parser"
type=AVC msg=audit(1575291995.353:219): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="torbrowser_firefox" pid=3061 comm="apparmor_parser"
type=AVC msg=audit(1575291995.365:220): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="avahi-daemon" pid=3077 comm="apparmor_parser"
type=AVC msg=audit(1575291995.389:221): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="syslogd" pid=3076 comm="apparmor_parser"
type=AVC msg=audit(1575291995.437:222): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="identd" pid=3079 comm="apparmor_parser"
type=AVC msg=audit(1575291995.441:223): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="mdnsd" pid=3080 comm="apparmor_parser"
type=AVC msg=audit(1575291995.457:224): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="nmbd" pid=3081 comm="apparmor_parser"
type=AVC msg=audit(1575291995.477:225): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=3067 comm="apparmor_parser"
type=AVC msg=audit(1575291995.477:226): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=3067 comm="apparmor_parser"
type=AVC msg=audit(1575291995.513:227): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=3067 comm="apparmor_parser"
type=AVC msg=audit(1575291995.509:228): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="nscd" pid=3082 comm="apparmor_parser"
type=AVC msg=audit(1575291995.517:229): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/dnsmasq" pid=3078 comm="apparmor_parser"
type=AVC msg=audit(1575291995.545:230): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/dnsmasq//libvirt_leaseshelper" pid=3078 comm="apparmor_parser"
type=AVC msg=audit(1575291995.545:231): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="traceroute" pid=3085 comm="apparmor_parser"
type=AVC msg=audit(1575291995.557:232): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="smbd" pid=3083 comm="apparmor_parser"
type=AVC msg=audit(1575291995.585:233): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="smbldap-useradd" pid=3084 comm="apparmor_parser"
type=AVC msg=audit(1575291995.601:234): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="smbldap-useradd///etc/init.d/nscd" pid=3084 comm="apparmor_parser"
type=AVC msg=audit(1575291996.297:235): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird" pid=3087 comm="apparmor_parser"
type=AVC msg=audit(1575291996.321:236): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//browser_java" pid=3087 comm="apparmor_parser"
type=AVC msg=audit(1575291996.321:237): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//browser_openjdk" pid=3087 comm="apparmor_parser"
type=AVC msg=audit(1575291996.321:238): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//gpg" pid=3087 comm="apparmor_parser"
type=AVC msg=audit(1575291996.321:239): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//sanitized_helper" pid=3087 comm="apparmor_parser"
type=AVC msg=audit(1575291997.125:240): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince" pid=3066 comm="apparmor_parser"
type=AVC msg=audit(1575291997.153:241): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince//sanitized_helper" pid=3066 comm="apparmor_parser"
type=AVC msg=audit(1575291997.153:242): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-previewer" pid=3066 comm="apparmor_parser"
type=AVC msg=audit(1575291997.185:243): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-previewer//sanitized_helper" pid=3066 comm="apparmor_parser"
type=AVC msg=audit(1575291997.185:244): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-thumbnailer" pid=3066 comm="apparmor_parser"
type=AVC msg=audit(1575291998.581:245): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-soffice" pid=3060 comm="apparmor_parser"
type=AVC msg=audit(1575291998.617:246): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-soffice//gpg" pid=3060 comm="apparmor_parser"
type=AVC msg=audit(1575291998.621:247): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="ping" pid=3100 comm="apparmor_parser"
type=AVC msg=audit(1575291998.625:248): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="firejail-default" pid=3106 comm="apparmor_parser"
type=AVC msg=audit(1575291998.629:249): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/home/m1l31/snap" pid=3112 comm="apparmor_parser"
type=AVC msg=audit(1575291998.633:250): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session" pid=3124 comm="apparmor_parser"
type=AVC msg=audit(1575291998.633:250): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/x86_64-linux-gnu/lightdm/lightdm-guest-session//chromium" pid=3124 comm="apparmor_parser"
type=AVC msg=audit(1575291998.633:251): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lsb_release" pid=3137 comm="apparmor_parser"
type=AVC msg=audit(1575291998.637:252): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="nvidia_modprobe" pid=3138 comm="apparmor_parser"
type=AVC msg=audit(1575291998.637:252): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="nvidia_modprobe//kmod" pid=3138 comm="apparmor_parser"
type=AVC msg=audit(1575291998.637:253): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="klogd" pid=3142 comm="apparmor_parser"
type=AVC msg=audit(1575291998.637:254): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="syslog-ng" pid=3146 comm="apparmor_parser"
type=AVC msg=audit(1575291998.641:255): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="syslogd" pid=3150 comm="apparmor_parser"
type=AVC msg=audit(1575291998.641:256): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="system_tor" pid=3154 comm="apparmor_parser"
type=AVC msg=audit(1575291998.641:257): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="torbrowser_firefox" pid=3158 comm="apparmor_parser"
type=AVC msg=audit(1575291998.669:258): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="torbrowser_tor" pid=3213 comm="apparmor_parser"
type=AVC msg=audit(1575291998.669:259): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="torbrowser_plugin_container" pid=3211 comm="apparmor_parser"
type=AVC msg=audit(1575291998.669:260): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/man" pid=3215 comm="apparmor_parser"
type=AVC msg=audit(1575291998.669:260): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_filter" pid=3215 comm="apparmor_parser"
type=AVC msg=audit(1575291998.669:260): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="man_groff" pid=3215 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:261): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/onioncircuits" pid=3220 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:262): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/ricochet" pid=3222 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:263): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/ipsec/charon" pid=3227 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:264): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/lib/ipsec/stroke" pid=3229 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:265): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-oopslash" pid=3233 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:266): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-senddoc" pid=3236 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:267): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libreoffice-xpdfimport" pid=3240 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:268): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="avahi-daemon" pid=3242 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:269): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/cups-browsed" pid=3244 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:270): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince" pid=3214 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:270): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince//sanitized_helper" pid=3214 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:270): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-previewer" pid=3214 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:270): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-previewer//sanitized_helper" pid=3214 comm="apparmor_parser"
type=AVC msg=audit(1575291998.673:270): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/bin/evince-thumbnailer" pid=3214 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:271): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird" pid=3225 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:271): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//browser_java" pid=3225 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:271): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//browser_openjdk" pid=3225 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:271): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//gpg" pid=3225 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:271): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="thunderbird//sanitized_helper" pid=3225 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:272): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/haveged" pid=3249 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:273): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=3245 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:273): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd" pid=3245 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:273): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/cupsd//third_party" pid=3245 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:274): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-soffice" pid=3238 comm="apparmor_parser"
type=AVC msg=audit(1575291998.677:274): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libreoffice-soffice//gpg" pid=3238 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:275): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="identd" pid=3251 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:276): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/dnsmasq" pid=3247 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:276): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/dnsmasq//libvirt_leaseshelper" pid=3247 comm="apparmor_parser"
type=AVC msg=audit(1575291998.681:277): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="mdnsd" pid=3252 comm="apparmor_parser"
type=AVC msg=audit(1575291998.765:278): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="nmbd" pid=3257 comm="apparmor_parser"
type=AVC msg=audit(1575291998.817:279): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="nscd" pid=3261 comm="apparmor_parser"
type=AVC msg=audit(1575291998.817:280): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/ntpd" pid=3262 comm="apparmor_parser"
type=AVC msg=audit(1575291998.861:281): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="smbd" pid=3270 comm="apparmor_parser"
type=AVC msg=audit(1575291998.885:282): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/sbin/tcpdump" pid=3275 comm="apparmor_parser"
type=AVC msg=audit(1575291998.885:283): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="smbldap-useradd" pid=3274 comm="apparmor_parser"
type=AVC msg=audit(1575291998.885:283): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="smbldap-useradd///etc/init.d/nscd" pid=3274 comm="apparmor_parser"
type=AVC msg=audit(1575291998.917:284): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="traceroute" pid=3280 comm="apparmor_parser"
type=USER_CMD msg=audit(1575292228.897:312): pid=3535 uid=1000 auid=1000 ses=2 subj==unconfined msg='cwd="/home/m1l31" cmd="apparmor_status" terminal=pts/2 res=success'

Thanks in advance

evpne · December 2, 2019, 2:06pm

I couldnt start/stop/restart apparmor without this fix

arctvrus · December 5, 2019, 5:57pm

I have the same issue but it was just for Tor, firejail parser. Also Libreoffice started as root, always. I managed to change privilegies in Libreoffice, and since las upgrade lightdm-guest-session//chormium, and ping joined the party. I don’t know what the problem may be.

First I thought it was some kind of default config, to let tor and anonsurf start since boot and be ready to use, also firejail processes that need to run without sandbox, but I’m not sure and I’m curious why lightdm-guest-session is unconfined

san7 · December 10, 2019, 8:42am

thanks all for your suggestions - I have tried all of them - none of them worked or made it even worst but a clean installation with 4.7 fixed everything.

arctvrus · December 12, 2019, 2:36am

Hello, at least you got no more issues, I’m telling my story and maybe open a new thread.

I used:
$ aparmor_status

I think I had to use sudo… to list all the complaiant apps.

then used
$ aa-enforce APPNAME

one by one, I’m a newbie and it was a tedious night, some of the symlinks were broken, so I had to use
$ locate APPNAME

when symlinks showed choosed the more similiar to invoked with apparmor_status. I had to create at least two new profiles and couldn´t use apparmor_parser… you know, just rookie things.

Anyway, now I have real trouble, system is crashing and won’t load gnome. I’m forced to enter into rescue mode as root or as normal user without sudo permissions. Used chmod like there’s no tomorrow… I learned my lesson. and lightdm inits on tty7 and I’m all by myself with the keyboard (yay for me ), at least as root… so, I was thinking a way to dump RAM or force shutdown without getting an error to stop the loop, but there’s a job that just keeps running and wont let CPU off.

Also, using Grub, noticed what does it mean DMA is bailing! I need to flash it… anyway hope someone can help. Also some how I rod the entire ELF embbeded in biosdisk.bin and got a couple of DNS and MDNS from the badguys, with wireshark I tracked a couple of IP and AP that are real suspicious, and… theres a hidden open AP so, I think something is goin on on my neighbour I may need a new firmware for my router too…

system · April 10, 2020, 2:36am

This topic was automatically closed 120 days after the last reply. New replies are no longer allowed.