Comments (10)
The fix for this, similar to bitwarden/clients#5153, is to create a new file in /etc/apparmor.d/superproductivity
with the contents:
# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile superproductivity /path/to/superproductivity flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/superproductivity>
}
For Electron-based flatpak apps (like Signal Desktop), it looks like things just work because there's already a /etc/apparmor.d/flatpak file with similar contents.
from super-productivity.
I think the file from the example above could be included in .rpms and .debs to fix the problem on systems with either of those packages installed. But that wouldn't help the AppImage without some manual intervention by the user, since a file needs to be placed in /etc/apparmor.d
. It might be naturally fixed in a snap and/or flatpak, but I'm not sure since I moved away from the snap due to #1443.
from super-productivity.
I don't know of all the implications of running without the sandbox, but I certainly don't think that should happen automatically for an app that retrieves data from possibly untrusted sources (you probably don't want the app to end up on https://no-sandbox.io/). The solution above should work fine for .debs and .rpms, but not automatically for AppImage. Unfortunately I don't know of a safe way to make it work automatically for everyone.
from super-productivity.
Thank you very much for opening up this issue! I am currently a bit overwhelmed by the many requests that arrive each week, so please forgive me, if I fail to respond personally. I am still very likely to at least skim read your request and I'll probably try to fix all (real) bugs if possible and I will likely review every single PR being made (please, give me a heads up if you intent to do so) and I will try to work on popular requests (please upvote via thumbs up on the original issue) whenever possible, but trying to respond to every single issue over the last years has been kind of draining and I need to adjust my approach for this project to remain fun for me and to make any progress with actually coding new stuff. Thanks for your understanding!
from super-productivity.
From journalctl
, I get this:
kernel: audit: type=1400 audit(1716499214.956:213): apparmor="AUDIT" operation="userns_create" class="namespace" info="Userns create - transitioning profile" profile="unconfined" pid=35734 comm="superproductivi" requested="userns_create" target="unprivileged_userns"
kernel: audit: type=1400 audit(1716499214.957:214): apparmor="DENIED" operation="capable" class="cap" profile="unprivileged_userns" pid=35741 comm="superproductivi" capability=21 capname="sys_admin"
Related discussion in Bitwarden: bitwarden/clients#5153
from super-productivity.
Does this error also occur if you start the app with superproductivity --no-sandbox
?
from super-productivity.
It does work with --no-sandbox, but that doesn't seem ideal since it does talk to stuff on the Internet.
from super-productivity.
I have a similar problem with ubuntu 24.04. Osmo organizer process starts and is active but no graphic interface appears on the screen. It worked very well under ubuntu 22.04 and previous versions. After reinstalling the application, the interface stays invisible wile the process is active and can be identified with "pidof" and killed. Same behaviour if starting from terminal, with or without --no-sandof. Have you any solution ?
from super-productivity.
Not sure what is the best way around this issue from our side. Help would be very welcome!
from super-productivity.
Another approach might be to re-start the app with no-sandbox if the start fails once. We then could display a warning at the start and link to a page which explains the situation and how to fix it. What do you think @aripollak? Could this work? This way we don't have to do some special handling for every different platform. And I think most problematic for Super Productivity as a whole is when new users can't start the app without fiddling around.
from super-productivity.
Related Issues (20)
- Custom repeat start date isn't the first occurrence of the repeat task HOT 6
- Got it while increasing the notifications sound in iphone(web app) HOT 3
- often closes, counters HOT 3
- Schedule task to "Next week" does not respect "Start of week day" setting HOT 4
- Tasks in Planner get lost HOT 5
- Missing recurring tasks in version 9.0.7 on windows10 and version 23 from playstore on android HOT 3
- Unknown Sync Error: Error: AxiosError: Request failed with status code 400 with dropbox sync HOT 4
- Repeated tasks don't respect the start time of the next day setting HOT 1
- RC versions not being handled by the AUR publish action HOT 4
- Plane.So Issue Integration HOT 3
- Flow Time technique aka Flowmodoro HOT 5
- Mac App Store / latest Version is 4.1 / downloaded Version 8.0.1 / no updates available HOT 3
- Invalid error string on pomodoro's longer break sessions HOT 2
- Unfocusing when `ctrl`+`Space` HOT 4
- remove the app from dock when minimize to tray option is enabled HOT 2
- TypeError: Cannot convert undefined or null to object HOT 2
- Auto stop timer on lock screen activity HOT 8
- Scheduled tasks (with time) appear on next day HOT 12
- legg til ny oppgave HOT 2
- TypeError: Cannot read properties of undefined (reading 'entities') HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from super-productivity.