An AppArmor profile in this package not only fails to load, it takes an
unreasonable amount of time to parse:

# time -p apparmor_parser -K -v /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin
Too many states (172789) for type state_t
real 819.27
user 632.74
sys 39.09

This causes the apparmor.service startup to delay the boot process
significantly, and then fail.

tag 1142389 + moreinfo
tag 1142389 + unreproducible
thanks

Am 19.07.26 um 04:26 schrieb Daniel Richard G.:

Maybe on your system..
user 7,92
sys 0,06


in my smallish pure Debian 13 VM.

With the Debian 13 kernel as of now (6.12.95+deb13-amd64). Do you use something else? Some other arch?

Unhelpfully you omit any of the reportbug info.


Besides that: if it was a general problem, it should have been happening earlier, shouldn't it? And deb13u6 didn't get any update of anything apparmor'ish, neither did get stable an apparmor update lately.


Regards,


Rene

Hi Rene,

No, this is a fresh install of trixie on amd64. I had a workaround for
this issue dating back to bookworm, and I experimentally disabled it to
see if this still comes up.

Incidentally, this only occurs on Debian. The same profile on Ubuntu
behaves perfectly fine.

I suspect the difference between your run and mine is some AppArmor
tunable. I'll try and see if I can reproduce your run on a stock system,
and then add elements of my config that might affect it.

It wouldn't have been much more helpful :]

I've only recently started looking at trixie. This is not a point-
release regression; this is a longer-term issue for which I finally got
around to filing a report.

Hi,

Am 19.07.26 um 17:35 schrieb Daniel Richard G.:

Hmm

But that VM is a clean install of Debian which all the desktop tasks. No configuration there at all.

(Don't remember whether it was bookworm and dist-upgraded or trixie installed directly.)

OK, thanks

Probably, except for the arch and (unexpected) additions/modifications..

Hmm, ok.


Regards,


Rene

Hi Rene, apologies for the wait.

I've successfully reproduced the issue on a Debian trixie live CD,
version 13.6.0.

Do "dpkg-reconfigure apparmor", and for "Additional home directory
locations," enter

    /home/x/

(This is representative of my site, where a local user has e.g.
/home/bob/, and an NFS-homed user has /home/nfs/bob/.)

If libreoffice-common is already installed, you should get an error from
"Reloading AppArmor profiles" after exiting debconf. By the same token,
the apparmor_parser command should exit with a "Too many states" error.
You may need to additionally pass it "-r" if the profile was previously
loaded without issue.

The failure doesn't take as long to occur with this minimal input, only
246 seconds in my test VM. Most other input variations do yield the
short loading time (without error) that you obtained.

retitle 1142389 libreoffice-common: *.soffice.bin AppArmor profile fails to load wiith additional home directory locations
thanks

Am 02.08.26 um 00:57 schrieb Daniel Richard G.:
Hrm.

So far for

"No, this is a fresh install of trixie on amd64"

Adding this is not a "fresh install" :)


(Last I have seen NFS-homed systems myself was at a former employer in 2004-2006...)


Regards,


Rene