From 206320128f9636b814af76230ad64ed3b5e36fb8 Mon Sep 17 00:00:00 2001 From: Mike Gabriel Date: Thu, 24 Aug 2023 11:19:02 +0200 Subject: [PATCH] data/apparmor/lightdm-guest-session.in: Allow l operation on /run/user/*/ICEauthority-l. This resolves long login delays into X11 guest sessions when using Arctica Greeter (forked from Unity Greeter). While waiting for the desktop to appear, the screen stays black and a non-WM'ed dialog box appears on screen, saying: "Could not update ICEauthority file /run/user//ICEauthority". When testing with MATE desktop, apparmor denies esp. creating this link operation: operation="link" class="file" profile="/lightdm-guest-session" name="/run/user/997/ICEauthority-l" pid= comm="mate-session" requested_mask="l" denied_mask="l" fsuid= ouid= target="/run/user//ICEauthority-c" Similar in Xfce4: operation="link" class="file" profile="/lightdm-guest-session" name="/run/user/997/ICEauthority-l" pid= comm="iceauth" requested_mask="l" denied_mask="l" fsuid= ouid= target="/run/user//ICEauthority-c" --- data/apparmor/lightdm-guest-session.in | 1 + 1 file changed, 1 insertion(+) diff --git a/data/apparmor/lightdm-guest-session.in b/data/apparmor/lightdm-guest-session.in index 3239c54b0..f4938c7cc 100644 --- a/data/apparmor/lightdm-guest-session.in +++ b/data/apparmor/lightdm-guest-session.in @@ -18,6 +18,7 @@ /usr/bin/sogou-qimpanel-watchdog ix, /usr/bin/sogou-sys-notify ix, /tmp/sogou-qimpanel:* rwl, + /run/user/*/ICEauthority-l l, # Allow ibus unix (bind, listen) type=stream addr="@tmp/ibus/*",