SUMMARY The apparmor profile for krdc should be updated to remove audit messages. STEPS TO REPRODUCE 1. start /snap/bin/krdc 2. connect to a VNC server OBSERVED RESULT The following messages are logged by the kernel: [23322.233955] audit: type=1400 audit(1745260174.132:579): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=24602 comm="snap-confine" capability=12 capname="net_admin" [23322.233967] audit: type=1400 audit(1745260174.132:580): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=24602 comm="snap-confine" capability=38 capname="perfmon" [23322.236080] audit: type=1400 audit(1745260174.134:581): apparmor="DENIED" operation="capable" class="cap" profile="/usr/lib/snapd/snap-confine" pid=24602 comm="snap-confine" capability=4 capname="fsetid" [23328.377203] audit: type=1400 audit(1745260180.276:583): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/proc/sys/kernel/core_pattern" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [23328.434437] audit: type=1400 audit(1745260180.333:584): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/kdedefaults/kdeglobals" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23328.435569] audit: type=1400 audit(1745260180.335:585): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/krdcrc" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23328.462480] audit: type=1400 audit(1745260180.361:586): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/krdcrc" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23328.486850] audit: type=1400 audit(1745260180.386:587): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/kdedefaults/kcminputrc" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23328.486860] audit: type=1400 audit(1745260180.386:588): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/kcminputrc" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23328.705771] audit: type=1326 audit(1745260180.605:589): auid=1000 uid=1000 gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc" exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7d58eb76e6f1 code=0x50000 [23328.705778] audit: type=1326 audit(1745260180.605:590): auid=1000 uid=1000 gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc" exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7d58eb76e6f1 code=0x50000 [23328.705781] audit: type=1326 audit(1745260180.605:591): auid=1000 uid=1000 gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc" exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7d58eb76e6f1 code=0x50000 [23328.705784] audit: type=1326 audit(1745260180.605:592): auid=1000 uid=1000 gid=1000 ses=3 subj=snap.krdc.krdc pid=24602 comm="krdc" exe="/snap/krdc/102/usr/bin/krdc" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7d58eb76e6f1 code=0x50000 [23338.700767] audit: type=1400 audit(1745260190.599:620): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/kdedefaults/kdeglobals" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23340.957849] audit: type=1400 audit(1745260192.856:621): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/kwalletrc" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [23340.957930] audit: type=1400 audit(1745260192.856:622): apparmor="DENIED" operation="open" class="file" profile="snap.krdc.krdc" name="/home/bonnaudl/.config/kwalletrc" pid=24602 comm="krdc" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 EXPECTED RESULT No audit logs. SOFTWARE/OS VERSIONS $ kinfo Operating System: Kubuntu 25.04 KDE Plasma Version: 6.3.4 KDE Frameworks Version: 6.12.0 Qt Version: 6.8.3 Kernel Version: 6.14.3-061403-generic (64-bit) Graphics Platform: X11
Hi, I don't actually have any control over the apparmor profiles. Please report this upstream snapd https://bugs.launchpad.net/snapd/+filebug
Thank you for your answer! I reported the bug there: https://bugs.launchpad.net/kde-snap-krdc/+bug/2113940
🐛🧹 ⚠️ This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information, then set the bug status to REPORTED. If there is no change for at least 30 days, it will be automatically closed as RESOLVED WORKSFORME. For more information about our bug triaging procedures, please read https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging. Thank you for helping us make KDE software even better for everyone!
🐛🧹 This bug has been in NEEDSINFO status with no change for at least 30 days. Closing as RESOLVED WORKSFORME.