Dear Maintainer,

The profile at /etc/apparmor.d/usr.libexec.geoclue shipped with trixie results
in the service failing to start, there are errors:

```
kernel: audit: type=1400 audit(1753168291.299:1301): apparmor="DENIED" operation="connect" class="file" profile="/usr/libexec/geoclue" name="/run/dbus/system_bus_socket" pid=53660 comm="pool-0" requested_mask="wr" denied_mask="wr" fsuid=118 ouid=0
```

Using the latest version at the `ubuntu/devel` branch at
https://code.launchpad.net/ubuntu/+source/geoclue-2.0 fixes the issue after restarting the services. The file should be attached bellow.

We believe that the bug you reported is fixed in the latest version of
geoclue-2.0, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1110134@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jeremy Bícha <jbicha@ubuntu.com> (supplier of updated geoclue-2.0 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 03 Dec 2025 16:51:04 -0500
Source: geoclue-2.0
Built-For-Profiles: noudeb
Architecture: source
Version: 2.8.0-1
Distribution: unstable
Urgency: medium
Maintainer: Laurent Bigonville <bigon@debian.org>
Changed-By: Jeremy Bícha <jbicha@ubuntu.com>
Closes: 1110134 1118821
Launchpad-Bugs-Fixed: 2030951
Changes:
 geoclue-2.0 (2.8.0-1) unstable; urgency=medium
 .
   * Team upload
 .
   [ Jeremy Bícha ]
   * New upstream release
   * Bump debhelper compat to 13
   * Update debian/upstream/metadata
   * Update gir handling (Closes: #1118821)
   * Use sysusers.d instead of adduser
   * Remove obsolete maintscript
   * Remove all patches: applied in new release
 .
   [ Laurent Bigonville ]
   * d/README.Debian: Update the README to explicitly state we are using beaconDB
   * debian/copyright: Update the FSF address
   * debian/control: Bump Standards-Version to 4.7.2 (no further changes)
 .
   [ Alessandro Astone ]
   * Fix AppArmor rules for DBus (LP: #2030951, Closes: #1110134)
 .
   [ Chris Talbot ]
   * debian/rules: Make beacondb.net default for wifi submissions
Checksums-Sha1:
 93c73cb9afe958791c478428a4ee7dd4075bf8fe 2720 geoclue-2.0_2.8.0-1.dsc
 d35127d28757c03ebbbd997c39331bef0f1b5376 112944 geoclue-2.0_2.8.0.orig.tar.bz2
 a5225e0e95c09edd8986b875264e3b7db8487568 12864 geoclue-2.0_2.8.0-1.debian.tar.xz
 e575415e9efb2ec886bbd30fd5abe15ff2d0dfbe 8930 geoclue-2.0_2.8.0-1_source.buildinfo
Checksums-Sha256:
 a1d1ac33341ae8bbd99b7c8905ff337c945c0c91e707387af3060e34308546a3 2720 geoclue-2.0_2.8.0-1.dsc
 c07aeb35cccf959ec1dc2e8f9a71a9d8bdd643879ef0a8d37926499541da1685 112944 geoclue-2.0_2.8.0.orig.tar.bz2
 b42947ad43e08b5f01c8f34c3dd2011da4ca55aaf018fb33e2ea7e395452dd98 12864 geoclue-2.0_2.8.0-1.debian.tar.xz
 6841f32c451ee5d127b7f3095fdaaf9018ff8eed844f7bf49a621f301be29ba9 8930 geoclue-2.0_2.8.0-1_source.buildinfo
Files:
 368e1dce175a91183719c563fdc84066 2720 utils optional geoclue-2.0_2.8.0-1.dsc
 def58282c7e1c95bc386906fdfbe29e3 112944 utils optional geoclue-2.0_2.8.0.orig.tar.bz2
 7d4b449d6b5d416cb7bf7e7c70427f36 12864 utils optional geoclue-2.0_2.8.0-1.debian.tar.xz
 63d2efd915d99d103ab50c2050c76e4f 8930 utils optional geoclue-2.0_2.8.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=x9Hx
-----END PGP SIGNATURE-----

I apologize for the late response.

Do you have a test case for this issue? With geoclue-2.7.2-2 on Debian
Testing, my approximate location was correctly shown with
gnome-clocks, gnome-maps, and gnome-weather. I turned on Automatic
Device Location in GNOME Settings > Privacy & Security > Location
first.

Thank you,
Jeremy Bícha

"Debian Bug Tracking System" <owner@bugs.debian.org> writes:

Hello Jeremy, thank you for the answer.

I updated to version 2.7.2-2 of the geoclue-2.0 package, reverted to the
default apparmor profile and restarted the apparmor service. I still get
the errors:


Note that this happens with kernel 6.14 and 6.17.

Thanks

I am unable to duplicate this issue from a new Debian GNOME 13
install. My systemd journal does not show geoclue failures.

I used
sudo journalctl -g geoclue

and this variant to limit results to only the current boot:
sudo journal -b -g geoclue

If you have time, maybe you could install Debian GNOME 13 in a VM and
figure out what changes you need to make to see the errors.

Thank you,
Jeremy Bícha