systemd-homed on btrfs log

[vbauerster]

❯ aa-log systemd-homed
ALLOWED systemd-homed open @{HOME}/ comm=systemd-homed requested_mask=r denied_mask=r
ALLOWED systemd-homed exec @{lib}/systemd/systemd-homework -> systemd-homework info="no new privs" comm=(sd-homework) requested_mask=x denied_mask=x error=-1
ALLOWED systemd-homed open @{HOME}/ comm=systemd-homewor requested_mask=r denied_mask=r
ALLOWED systemd-homed open @{HOME}/.identity comm=systemd-homewor requested_mask=r denied_mask=r
ALLOWED systemd-homed mount @{run}/systemd/user-home-mount/ info="failed srcname match" comm=systemd-homewor error=-13 srcname=/home/vbauer/ flags="rw, bind"
ALLOWED systemd-homed umount @{HOME}/ comm=systemd-homewor
ALLOWED systemd-homed umount @{run}/systemd/user-home-mount/ comm=systemd-homewor
ALLOWED systemd-homed open @{HOME}/ comm=systemd-homed requested_mask=r denied_mask=r
ALLOWED systemd-homed open @{HOME}/ comm=systemd-homewor requested_mask=r denied_mask=r
ALLOWED systemd-homed file_lock /home/vbauer.home comm=systemd-homewor requested_mask=k denied_mask=k
ALLOWED systemd-homed open @{PROC}/sys/fs/nr_open comm=(fsck) requested_mask=r denied_mask=r
ALLOWED systemd-homed exec @{bin}/fsck -> systemd-homed//null-@{bin}/fsck comm=(fsck) requested_mask=x denied_mask=x
ALLOWED systemd-homed exec @{bin}/fsck -> systemd-homed//null-@{bin}/fsck info="no new privs" comm=(fsck) requested_mask=x denied_mask=x error=-1
ALLOWED systemd-homed open /etc/fstab comm=fsck requested_mask=r denied_mask=r
ALLOWED systemd-homed exec @{bin}/fsck.btrfs -> systemd-homed//null-@{bin}/fsck.btrfs comm=fsck requested_mask=x denied_mask=x
ALLOWED systemd-homed exec @{bin}/fsck.btrfs -> systemd-homed//null-@{bin}/fsck.btrfs info="no new privs" comm=fsck requested_mask=x denied_mask=x error=-1
ALLOWED systemd-homed open /dev/tty comm=fsck.btrfs requested_mask=wr denied_mask=wr
ALLOWED systemd-homed open @{bin}/fsck.btrfs comm=fsck.btrfs requested_mask=r denied_mask=r
ALLOWED systemd-homed mount @{run}/systemd/user-home-mount/ info="failed srcname match" comm=systemd-homewor error=-13 flags="rw, private"
ALLOWED systemd-homed userns_create comm=systemd-homewor requested=userns_create denied=userns_create
ALLOWED systemd-homed capable comm=systemd-homewor capability=19 capname=sys_ptrace
ALLOWED systemd-homed mount @{run}/systemd/user-home-mount/vbauer/ info="failed mntpnt match" comm=systemd-homewor error=-13 flags="rw, move"
ALLOWED systemd-homed mount @{HOME}/ info="failed mntpnt match" comm=systemd-homewor error=-13 flags="rw, bind" srcname=/run/systemd/user-home-mount/vbauer/
ALLOWED systemd-homed umount @{run}/systemd/user-home-mount/vbauer/ comm=systemd-homewor
ALLOWED systemd-homed open @{HOME}/ comm=systemd-homed requested_mask=r denied_mask=r

Just FYI, not sure if profile needs any corrections. Log is generated with version 0.2977-1 on archlinux + gnome.

[roddhjav]

Thanks for these logs. Some fix are needed here. The main issue is about: ALLOWED systemd-homed exec @{lib}/systemd/systemd-homework -> systemd-homework info="no new privs" comm=(sd-homework) requested_mask=x denied_mask=x error=-1, the nnp flag needs to be handled.