Apparmor 初始化在 ubuntu 17.10 中失败

Question

安装 ubuntu 17.10 后，我开始在启动时收到此错误。这是输出

$ sudo service apparmor status
    pparmor.service - AppArmor initialization
   Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Tue 2017-11-07 08:48:16 EET; 10min ago
     Docs: man:apparmor(7)
           http://wiki.apparmor.net/
 Main PID: 621 (code=exited, status=123)

Nov 07 08:48:16 logician-724 apparmor[621]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Nov 07 08:48:16 logician-724 apparmor[621]: Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
Nov 07 08:48:16 logician-724 apparmor[621]: AppArmor parser error for /etc/apparmor.d/usr.bin.webbrowser-app in /etc/apparmor.d/usr.bin.webbrowser-app at line 26: Could not open '/usr/share/
Nov 07 08:48:16 logician-724 apparmor[621]: AppArmor parser error for /etc/apparmor.d/usr.lib.mediascanner-2.0.mediascanner-extractor in /etc/apparmor.d/usr.lib.mediascanner-2.0.mediascanner
Nov 07 08:48:16 logician-724 apparmor[621]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Nov 07 08:48:16 logician-724 apparmor[621]:    ...fail!
Nov 07 08:48:16 logician-724 systemd[1]: apparmor.service: Main process exited, code=exited, status=123/n/a
Nov 07 08:48:16 logician-724 systemd[1]: Failed to start AppArmor initialization.
Nov 07 08:48:16 logician-724 systemd[1]: apparmor.service: Unit entered failed state.
Nov 07 08:48:16 logician-724 systemd[1]: apparmor.service: Failed with result 'exit-code'.

Answer 1

我在我的三个 Ubuntu 17.10 系统上遇到了完全相同的错误。似乎发生的情况是 apparmor 启动脚本由于来自“webbrowser-app”和“mediascanner2.0”两个包的策略文件中的错误而返回错误。这两个包中的策略文件试图包含来自不存在的目录的文件。这是这两个包的打包错误。从“sudo aa-status”的输出可以看出，该错误仅影响这两个包提供的策略。

一种解决方法是安装提供缺失目录的“apparmor-easyprof-ubuntu”包。安装此软件包后，错误在我的系统上消失了。

sudo apt install apparmor-easyprof # Ubuntu >= 18.04)

或者：

sudo apt install apparmor-easyprof-ubuntu # Ubuntu < 18.04

参考：https : //bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1554803