Kloak latest update is broken

HulaHoop · October 8, 2025, 7:19pm

First off great job on the kloak improvements and making it work on Wayland. It was functioning well on Trixie until the latest update wreaked havoc with it and it is now unable to start. An error message I also see is systemd killing the service to stop order cycling from happening. Purging and reinstalling has the same result

Pasted below is the journactl grep kloak output. I hope it helps:

Oct 06 10:53:59 debian systemd[1]: kloak.service: This usually indicates unclean termination of a previous run, or service implementation deficiencies.
Oct 06 10:53:59 debian systemd[1]: Starting kloak.service - kloak anti keystroke deanonymization tool…
Oct 06 11:01:40 debian systemd[1]: multi-user.target: Found dependency on kloak.service/stop
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2975): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2976): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2977): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2978): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2979): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2980): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2981): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2982): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2983): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian kernel: audit: type=1400 audit(1759737700.123:2984): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
Oct 06 11:01:40 debian systemd[1]: kloak.service: Failed to kill control process 9819 (find_wl_composi), ignoring: Permission denied
Oct 06 11:01:40 debian systemd[1]: kloak.service: Failed to kill control group /system.slice/kloak.service, ignoring: Permission denied
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9819 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Failed to kill control process 9819 (find_wl_composi), ignoring: Permission denied
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8197 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8261 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8284 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8358 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8473 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8520 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8796 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8823 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8875 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8889 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8902 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8916 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8943 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 8994 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9019 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9220 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9244 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9282 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9288 (find_wl_composi) with signal SIGKILL.
Oct 06 11:01:40 debian systemd[1]: kloak.service: Killing process 9299 (find_wl_composi) with signal SIGKILL.

arraybolt3 · October 9, 2025, 3:53am

Curious, find_wl_compositor is a Python script that hasn’t had changes made to it super recently. If systemd is trying and failing to clean up a bunch of find_wl_compositor instances, that almost sounds like it’s stuck in a loop or similar.

Can you try the following:

In one terminal, run sudo dmesg -w, then in the terminal window click Actions > Clear Active Terminal to get rid of the irrelevant junk this initially outputs. As new kernel logs come in it will output them in real time.
In another terminal, sudo rm /run/kloak_wl_compositor_data
sudo /usr/libexec/kloak/find_wl_compositor
- Does this command hang?
- Does it print any error messages? If so, what does it say?
If the above command doesn’t hang and doesn’t print error messages, sudo cat /run/kloak_wl_compositor_data
- Do you see two environment variable definitions, one for XDG_RUNTIME_DIR and one for WAYLAND_DISPLAY?
Does anything suspicious show up in the dmesg terminal when you run find_wl_compositor?

I’m mainly hunting for an AppArmor issue here, there are some AppArmor gripes that are expected but I’m wondering if some permissions are being denied that shouldn’t be.

(We should also definitely allow PID 1 to SIGTERM the script. I’m a bit surprised that AppArmor actually prevented that and systemd had to resort to SIGKILL.)

HulaHoop · October 24, 2025, 5:32pm

Hi, sorry for the slow response. I’m running the latest version that was released a couple of days ago now.

sudo rm /run/kloak_wl_compositor_data
[sudo] password for user:
rm: cannot remove ‘/run/kloak_wl_compositor_data’: No such file or directory

During the update initially, before running your test commands I saw:

Preparing to unpack …/5-kloak_0%3a0.5.5-1_amd64.deb …
Unpacking kloak (0.5.5-1) over (0.5.3-1) …
Setting up kloak (0.5.5-1) …
Could not execute systemctl: at /usr/bin/deb-systemd-invoke line 148.

sudo /usr/libexec/kloak/find_wl_compositor
hangs

Yeah there’s a lot of related errors in the window

[ 1957.462561] kauditd_printk_skb: 102 callbacks suppressed
[ 1957.462575] audit: type=1400 audit(1761322523.603:1269): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463001] audit: type=1400 audit(1761322523.607:1270): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463116] audit: type=1400 audit(1761322523.607:1271): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463290] audit: type=1400 audit(1761322523.607:1272): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463351] audit: type=1400 audit(1761322523.607:1273): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463468] audit: type=1400 audit(1761322523.607:1274): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463583] audit: type=1400 audit(1761322523.607:1275): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463714] audit: type=1400 audit(1761322523.607:1276): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463780] audit: type=1400 audit(1761322523.607:1277): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 1957.463971] audit: type=1400 audit(1761322523.607:1278): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.962499] kauditd_printk_skb: 108 callbacks suppressed
[ 2049.962509] audit: type=1400 audit(1761322616.103:1387): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.962959] audit: type=1400 audit(1761322616.107:1388): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963084] audit: type=1400 audit(1761322616.107:1389): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963193] audit: type=1400 audit(1761322616.107:1390): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963302] audit: type=1400 audit(1761322616.107:1391): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963432] audit: type=1400 audit(1761322616.107:1392): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963537] audit: type=1400 audit(1761322616.107:1393): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963645] audit: type=1400 audit(1761322616.107:1394): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963756] audit: type=1400 audit(1761322616.107:1395): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2049.963860] audit: type=1400 audit(1761322616.107:1396): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.462589] kauditd_printk_skb: 114 callbacks suppressed
[ 2142.462602] audit: type=1400 audit(1761322708.603:1511): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463112] audit: type=1400 audit(1761322708.607:1512): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463138] audit: type=1400 audit(1761322708.607:1513): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463253] audit: type=1400 audit(1761322708.607:1514): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463363] audit: type=1400 audit(1761322708.607:1515): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463477] audit: type=1400 audit(1761322708.607:1516): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463595] audit: type=1400 audit(1761322708.607:1517): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463775] audit: type=1400 audit(1761322708.607:1518): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463800] audit: type=1400 audit(1761322708.607:1519): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2142.463907] audit: type=1400 audit(1761322708.607:1520): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.962584] kauditd_printk_skb: 120 callbacks suppressed
[ 2234.962591] audit: type=1400 audit(1761322801.103:1641): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.962748] audit: type=1400 audit(1761322801.107:1642): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.962809] audit: type=1400 audit(1761322801.107:1643): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.962866] audit: type=1400 audit(1761322801.107:1644): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.962920] audit: type=1400 audit(1761322801.107:1645): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.962976] audit: type=1400 audit(1761322801.107:1646): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.963026] audit: type=1400 audit(1761322801.107:1647): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.963076] audit: type=1400 audit(1761322801.107:1648): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.963125] audit: type=1400 audit(1761322801.107:1649): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”
[ 2234.963175] audit: type=1400 audit(1761322801.107:1650): apparmor=“DENIED” operation=“signal” class=“signal” profile=“/usr/libexec/kloak/find_wl_compositor” pid=1 comm=“systemd” requested_mask=“receive” denied_mask=“receive” signal=term peer=“unconfined”

Unpopular opinion/question: Why bother using apparmor to confine kloak if it’s not a web facing process and runs with root? Is it worth the headache and breakage?

arraybolt3 · October 24, 2025, 8:46pm

kloak runs as root and has to interface with a Wayland compositor. Due to unfixable (as far as I know) race conditions involved in finding and connecting to the “right” Wayland compositor, an attacker that can get a foothold in the “standard” user account (usually user) can likely trick kloak into connecting to a fake Wayland compositor of the attacker’s own creation. At that point, any vulnerability in kloak or libwayland-client will allow arbitrary code execution as root. The AppArmor confinement prevents this from being a problem.

I’m guessing the “real” issue is hiding somewhere in one of the messages the kerned hid when it said [ 1957.462561] kauditd_printk_skb: 102 callbacks suppressed. Can you reboot the affected machine, run sudo sysctl kernel.printk_ratelimit=0, then try running sudo /usr/libexec/kloak/find_wl_compositor again and show all of the AppArmor issues it spits out? (It will be a lot, but hopefully somewhere in there the real culprit will be hiding.) Also, what platform are you running on? KVM? (FWIW I saw kloak working properly on Whonix-Workstation 18 in KVM just a few minutes ago.)

HulaHoop · November 1, 2025, 8:13pm

Ran the commands for version 5.6 and here’s the relevant dmesg output.
I’m running a Trixie host. Not sure if choice of DE matters.
I’m curious if the inability of initramfs to update has any bearing on kloak’s updates?

[  175.417118] audit: type=1400 audit(1762026335.556:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="Discord" pid=726 comm="apparmor_parser"
[  175.417138] audit: type=1400 audit(1762026335.556:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="QtWebEngineProcess" pid=728 comm="apparmor_parser"
[  175.417145] audit: type=1400 audit(1762026335.556:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="1password" pid=725 comm="apparmor_parser"
[  175.417152] audit: type=1400 audit(1762026335.556:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name=4D6F6E676F444220436F6D70617373 pid=727 comm="apparmor_parser"
[  175.533497] audit: type=1400 audit(1762026335.672:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="buildah" pid=741 comm="apparmor_parser"
[  175.533521] audit: type=1400 audit(1762026335.672:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="brave" pid=740 comm="apparmor_parser"
[  175.536231] audit: type=1400 audit(1762026335.676:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="balena-etcher" pid=739 comm="apparmor_parser"
[  175.536828] audit: type=1400 audit(1762026335.676:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="cam" pid=744 comm="apparmor_parser"
[  175.537471] audit: type=1400 audit(1762026335.676:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="busybox" pid=743 comm="apparmor_parser"
[  175.575209] audit: type=1400 audit(1762026335.716:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="ch-checkns" pid=745 comm="apparmor_parser"
[  175.967644] RPC: Registered named UNIX socket transport module.
[  175.967651] RPC: Registered udp transport module.
[  175.967653] RPC: Registered tcp transport module.
[  175.967654] RPC: Registered tcp-with-tls transport module.
[  175.967656] RPC: Registered tcp NFSv4.1 backchannel transport module.
[  189.148074] RTL8208 Fast Ethernet r8169-0-100:00: attached PHY driver (mii_bus:phy_addr=r8169-0-100:00, irq=MAC)
[  189.347811] NET: Registered PF_QIPCRTR protocol family
[  189.428719] r8169 0000:01:00.0 eth0: Link is Down
[  191.174123] kauditd_printk_skb: 123 callbacks suppressed
[  191.174136] audit: type=1400 audit(1762026351.312:135): apparmor="DENIED" operation="open" class="file" profile="/usr/sbin/cupsd" name="/etc/paperspecs" pid=1069 comm="cupsd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  192.650137] audit: type=1400 audit(1762026352.788:136): apparmor="DENIED" operation="capable" class="cap" profile="/usr/sbin/cupsd" pid=1069 comm="cupsd" capability=12  capname="net_admin"
[  193.262036] wlan0: authenticate with 8c:3b:ad:15:6f:3e (local address=f0:03:8c:54:da:4d)
[  193.262052] wlan0: send auth to 8c:3b:ad:15:6f:3e (try 1/3)
[  193.285771] wlan0: authenticated
[  193.286736] wlan0: associate with 8c:3b:ad:15:6f:3e (try 1/3)
[  193.291126] wlan0: RX AssocResp from 8c:3b:ad:15:6f:3e (capab=0x431 status=0 aid=2)
[  193.291577] wlan0: associated
[  203.073071] audit: type=1400 audit(1762026363.212:137): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  203.074374] audit: type=1400 audit(1762026363.212:138): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  203.083347] audit: type=1400 audit(1762026363.224:139): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/nsswitch.conf" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  203.083383] audit: type=1400 audit(1762026363.224:140): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/passwd" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  205.486124] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[  210.352134] r8169 0000:01:00.0: invalid VPD tag 0xff (size 0) at offset 0; assume missing optional EEPROM
[  283.458086] audit: type=1400 audit(1762026443.596:141): apparmor="DENIED" operation="open" class="file" profile="mariadbd_akonadi" name="/sys/devices/system/node/" pid=2392 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[  283.783091] warning: `kdeconnectd' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  288.425393] audit: type=1400 audit(1762026448.564:142): apparmor="DENIED" operation="open" class="file" profile="mariadbd_akonadi" name="/sys/devices/system/node/" pid=2415 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[  288.947294] audit: type=1400 audit(1762026449.088:143): apparmor="DENIED" operation="open" class="file" profile="mariadbd_akonadi" name="/usr/share/mariadb/charsets/Index.xml" pid=2415 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[  289.578952] audit: type=1400 audit(1762026449.720:144): apparmor="DENIED" operation="open" class="file" profile="mariadbd_akonadi" name="/sys/block/" pid=2415 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[  289.591868] audit: type=1400 audit(1762026449.732:145): apparmor="DENIED" operation="open" class="file" profile="mariadbd_akonadi" name="/proc/2415/cgroup" pid=2415 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[  289.631353] audit: type=1400 audit(1762026449.772:146): apparmor="DENIED" operation="open" class="file" profile="mariadbd_akonadi" name="/sys/devices/virtual/block/dm-1/queue/physical_block_size" pid=2415 comm="mysqld" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[  292.964478] audit: type=1400 audit(1762026453.104:147): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  292.964743] audit: type=1400 audit(1762026453.104:148): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  292.964944] audit: type=1400 audit(1762026453.104:149): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  292.965324] audit: type=1400 audit(1762026453.104:150): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  292.965335] audit: type=1400 audit(1762026453.104:151): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  295.018134] audit: type=1400 audit(1762026455.156:152): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  295.078971] audit: type=1400 audit(1762026455.220:153): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=2441 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  295.079659] audit: type=1400 audit(1762026455.220:154): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=2441 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  295.084966] audit: type=1400 audit(1762026455.224:155): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/nsswitch.conf" pid=2441 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  295.084981] audit: type=1400 audit(1762026455.224:156): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/passwd" pid=2441 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  295.245819] audit: type=1400 audit(1762026455.384:157): apparmor="DENIED" operation="exec" class="file" profile="mariadbd_akonadi" name="/usr/bin/mariadb" pid=2443 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[  299.670649] audit: type=1400 audit(1762026459.808:158): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/akonadiserver" name="/home/user/.local/share/mime/packages/application-pkcs12.xml" pid=2383 comm="NotificationMan" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[  299.671095] audit: type=1400 audit(1762026459.812:159): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/akonadiserver" name="/home/user/.local/share/mime/packages/application-vnd.ms-word.xml" pid=2383 comm="NotificationMan" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[  299.671106] audit: type=1400 audit(1762026459.812:160): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/akonadiserver" name="/home/user/.local/share/mime/packages/application-vnd.sun.xml.base.xml" pid=2383 comm="NotificationMan" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[  299.671154] audit: type=1400 audit(1762026459.812:161): apparmor="DENIED" operation="open" class="file" profile="/usr/bin/akonadiserver" name="/home/user/.local/share/mime/packages/application-x-pkcs12.xml" pid=2383 comm="NotificationMan" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[  332.928463] atkbd serio0: Unknown key pressed (translated set 2, code 0xab on isa0060/serio0).
[  332.928482] atkbd serio0: Use 'setkeycodes e02b <keycode>' to make it known.
[  332.936601] atkbd serio0: Unknown key released (translated set 2, code 0xab on isa0060/serio0).
[  332.936619] atkbd serio0: Use 'setkeycodes e02b <keycode>' to make it known.
[  334.007296] atkbd serio0: Unknown key pressed (translated set 2, code 0xab on isa0060/serio0).
[  334.007307] atkbd serio0: Use 'setkeycodes e02b <keycode>' to make it known.
[  334.016768] atkbd serio0: Unknown key released (translated set 2, code 0xab on isa0060/serio0).
[  334.016785] atkbd serio0: Use 'setkeycodes e02b <keycode>' to make it known.
[  334.306804] atkbd serio0: Unknown key pressed (translated set 2, code 0xab on isa0060/serio0).
[  334.306822] atkbd serio0: Use 'setkeycodes e02b <keycode>' to make it known.
[  334.316479] atkbd serio0: Unknown key released (translated set 2, code 0xab on isa0060/serio0).
[  334.316496] atkbd serio0: Use 'setkeycodes e02b <keycode>' to make it known.
[  385.214412] kauditd_printk_skb: 4 callbacks suppressed
[  385.214419] audit: type=1400 audit(1762026545.352:166): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  385.214748] audit: type=1400 audit(1762026545.356:167): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  385.215057] audit: type=1400 audit(1762026545.356:168): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  385.215128] audit: type=1400 audit(1762026545.356:169): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  385.215344] audit: type=1400 audit(1762026545.356:170): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  385.215401] audit: type=1400 audit(1762026545.356:171): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  385.215619] audit: type=1400 audit(1762026545.356:172): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  385.215724] audit: type=1400 audit(1762026545.356:173): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  385.216001] audit: type=1400 audit(1762026545.356:174): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  385.216130] audit: type=1400 audit(1762026545.356:175): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  477.714773] kauditd_printk_skb: 6 callbacks suppressed
[  477.714781] audit: type=1400 audit(1762026637.852:182): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  477.714931] audit: type=1400 audit(1762026637.856:183): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  477.715081] audit: type=1400 audit(1762026637.856:184): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  477.715273] audit: type=1400 audit(1762026637.856:185): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  477.715325] audit: type=1400 audit(1762026637.856:186): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  477.715433] audit: type=1400 audit(1762026637.856:187): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  477.715652] audit: type=1400 audit(1762026637.856:188): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  477.715663] audit: type=1400 audit(1762026637.856:189): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  477.715743] audit: type=1400 audit(1762026637.856:190): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  477.715935] audit: type=1400 audit(1762026637.856:191): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  570.214541] kauditd_printk_skb: 12 callbacks suppressed
[  570.214554] audit: type=1400 audit(1762026730.352:204): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  570.214961] audit: type=1400 audit(1762026730.356:205): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  570.215090] audit: type=1400 audit(1762026730.356:206): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  570.215207] audit: type=1400 audit(1762026730.356:207): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  570.215525] audit: type=1400 audit(1762026730.356:208): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  570.215832] audit: type=1400 audit(1762026730.356:209): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  570.216028] audit: type=1400 audit(1762026730.356:210): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  570.216217] audit: type=1400 audit(1762026730.356:211): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  570.216614] audit: type=1400 audit(1762026730.356:212): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  570.216759] audit: type=1400 audit(1762026730.356:213): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.714691] audit: type=1400 audit(1762026822.852:232): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.715030] audit: type=1400 audit(1762026822.856:233): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.715105] audit: type=1400 audit(1762026822.856:234): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.715184] audit: type=1400 audit(1762026822.856:235): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.715259] audit: type=1400 audit(1762026822.856:236): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.715498] audit: type=1400 audit(1762026822.856:237): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.715695] audit: type=1400 audit(1762026822.856:238): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.715819] audit: type=1400 audit(1762026822.856:239): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.715939] audit: type=1400 audit(1762026822.856:240): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.716099] audit: type=1400 audit(1762026822.856:241): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.716484] audit: type=1400 audit(1762026822.856:242): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.716495] audit: type=1400 audit(1762026822.856:243): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.716499] audit: type=1400 audit(1762026822.856:244): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.716521] audit: type=1400 audit(1762026822.856:245): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.716588] audit: type=1400 audit(1762026822.856:246): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  662.716825] audit: type=1400 audit(1762026822.856:247): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.717174] audit: type=1400 audit(1762026822.856:248): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.717189] audit: type=1400 audit(1762026822.856:249): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.717220] audit: type=1400 audit(1762026822.856:250): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.717317] audit: type=1400 audit(1762026822.856:251): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  662.717700] audit: type=1400 audit(1762026822.856:252): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  662.717784] audit: type=1400 audit(1762026822.856:253): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  662.717878] audit: type=1400 audit(1762026822.856:254): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  662.718058] audit: type=1400 audit(1762026822.856:255): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  662.718164] audit: type=1400 audit(1762026822.856:256): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  664.461957] audit: type=1400 audit(1762026824.600:257): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=3762 comm="sudo" requested_mask="receive" denied_mask="receive" signal=winch peer="unconfined"
[  664.967616] audit: type=1400 audit(1762026825.108:258): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  664.968168] audit: type=1400 audit(1762026825.108:259): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  664.968181] audit: type=1400 audit(1762026825.108:260): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  664.968246] audit: type=1400 audit(1762026825.108:261): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  664.968463] audit: type=1400 audit(1762026825.108:262): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  665.041490] audit: type=1400 audit(1762026825.180:263): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=3792 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  665.042335] audit: type=1400 audit(1762026825.180:264): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=3792 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  665.046578] audit: type=1400 audit(1762026825.184:265): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/nsswitch.conf" pid=3792 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  665.046587] audit: type=1400 audit(1762026825.184:266): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/passwd" pid=3792 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  755.214509] audit: type=1400 audit(1762026915.352:267): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.214882] audit: type=1400 audit(1762026915.356:268): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.215034] audit: type=1400 audit(1762026915.356:269): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.215219] audit: type=1400 audit(1762026915.356:270): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.215578] audit: type=1400 audit(1762026915.356:271): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.215593] audit: type=1400 audit(1762026915.356:272): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.215763] audit: type=1400 audit(1762026915.356:273): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.216224] audit: type=1400 audit(1762026915.356:274): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.216392] audit: type=1400 audit(1762026915.356:275): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.216710] audit: type=1400 audit(1762026915.356:276): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.216909] audit: type=1400 audit(1762026915.356:277): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.217231] audit: type=1400 audit(1762026915.356:278): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.217549] audit: type=1400 audit(1762026915.356:279): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.217652] audit: type=1400 audit(1762026915.356:280): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.217756] audit: type=1400 audit(1762026915.356:281): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.217855] audit: type=1400 audit(1762026915.356:282): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.217957] audit: type=1400 audit(1762026915.356:283): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.218073] audit: type=1400 audit(1762026915.356:284): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=term peer="unconfined"
[  755.218485] audit: type=1400 audit(1762026915.356:285): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.218714] audit: type=1400 audit(1762026915.360:286): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.219738] audit: type=1400 audit(1762026915.360:287): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.219747] audit: type=1400 audit(1762026915.360:288): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.219754] audit: type=1400 audit(1762026915.360:289): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.219759] audit: type=1400 audit(1762026915.360:290): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=kill peer="unconfined"
[  755.219998] audit: type=1400 audit(1762026915.360:291): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  755.220194] audit: type=1400 audit(1762026915.360:292): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  755.220416] audit: type=1400 audit(1762026915.360:293): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  755.220609] audit: type=1400 audit(1762026915.360:294): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  755.220809] audit: type=1400 audit(1762026915.360:295): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  755.221007] audit: type=1400 audit(1762026915.360:296): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.467556] audit: type=1400 audit(1762026917.608:297): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.467751] audit: type=1400 audit(1762026917.608:298): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.467989] audit: type=1400 audit(1762026917.608:299): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.468189] audit: type=1400 audit(1762026917.608:300): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.468393] audit: type=1400 audit(1762026917.608:301): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.468611] audit: type=1400 audit(1762026917.608:302): apparmor="DENIED" operation="signal" class="signal" profile="/usr/libexec/kloak/find_wl_compositor" pid=1 comm="systemd" requested_mask="receive" denied_mask="receive" signal=exists peer="unconfined"
[  757.530717] audit: type=1400 audit(1762026917.668:303): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=3871 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  757.531428] audit: type=1400 audit(1762026917.672:304): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=3871 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  757.536326] audit: type=1400 audit(1762026917.680:305): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/nsswitch.conf" pid=3871 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  757.536337] audit: type=1400 audit(1762026917.680:306): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/passwd" pid=3871 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

arraybolt3 · November 2, 2025, 12:36am

Probably not, kloak doesn’t rely on anything in the initramfs.

On the host, no. On the guest, very much so (only wlroots-based compositors are supported).

Hmm, inability to access /dev/null seems wrong…

HulaHoop:

[  203.083347] audit: type=1400 audit(1762026363.224:139): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/nsswitch.conf" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  203.083383] audit: type=1400 audit(1762026363.224:140): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/passwd" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

These are more-or-less expected, most likely something in the guts of Python thinks it needs to access those files (might be related to localization), but it doesn’t, and I intentionally didn’t let it. It didn’t break anything on my end.

Akonadi? Are you running KDE Plasma in the guest, or is this just the result of an app you have installed? Kloak does not work with kwin_wayland.

If you add /dev/null rw, to the end of /etc/apparmor.d/usr.libexec.kloak.find_wl_compositor and restart the VM, does that fix the issue?

Patrick · November 2, 2025, 10:02am

HulaHoop:

[  757.531428] audit: type=1400 audit(1762026917.672:304): apparmor="DENIED" operation="getattr" class="file" info="Failed name lookup - disconnected path" error=-13 profile="/usr/libexec/kloak/find_wl_compositor" name="dev/null" pid=3871 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Fix Profiles might help.

Alternatively, nowadays chatgpt can translate apparmor denied log entries into apparmor profile rules to be added to the apparmor profile. Then reload the apparmor profile.

sudo aa-enforce /etc/apparmor.d/usr.libexec.kloak.find_wl_compositor

arraybolt3:

HulaHoop:
[  203.083347] audit: type=1400 audit(1762026363.224:139): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/nsswitch.conf" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[  203.083383] audit: type=1400 audit(1762026363.224:140): apparmor="DENIED" operation="open" class="file" profile="/usr/libexec/kloak/find_wl_compositor" name="/etc/passwd" pid=1422 comm="find_wl_composi" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
These are more-or-less expected, most likely something in the guts of Python thinks it needs to access those files (might be related to localization), but it doesn’t, and I intentionally didn’t let it. It didn’t break anything on my end.

Could you apparmor deny these please to avoid spurious?

Seems safe. Let’s add this by default anyhow?

arraybolt3 · November 2, 2025, 3:52pm

Sure, I wasn’t aware that was possible.

Yes.

HulaHoop · November 2, 2025, 4:43pm

My host runs KDE Trixie. I run it on baremetal outside if KVM. My reasoning is I get to benefit from its protection for all workflows and VMs and it is out of reach for any malware that gains root in a VM. It used to work until version 5.3 then broke down. I trashed Akonadifor unrelated reasons before testing - but that’s another story.

IMHO Kloak should gain support dor different DEs because it’s being packaged for general purpose distros these days.

Running the debug commands this time around, I get different reactions and errors.

user@debian:~$ sudo rm /run/kloak_wl_compositor_data
[sudo] password for user:
rm: cannot remove ‘/run/kloak_wl_compositor_data’: No such file or directory
user@debian:~$ sudo /usr/libexec/kloak/find_wl_compositor
Traceback (most recent call last):
File “/usr/libexec/kloak/find_wl_compositor”, line 64, in
from query_sock_pid.query_sock_pid import query_sock_pid
ModuleNotFoundError: No module named 'query_sock_pid

dmesg output after editing aa profile and rebooting. Running latest version.

[ 263.137341] audit: type=1400 audit(1762100384.183:133): apparmor=“DENIED” operation=“getattr” class=“file” info=“Failed name lookup - disconnected path” error=-13 profile=“/usr/libexec/kloak/find_wl_compositor” name=“dev/null” pid=1405 comm=“find_wl_composi” requested_mask=“r” denied_mask=“r” fsuid=0 ouid=0
[ 263.138426] audit: type=1400 audit(1762100384.183:134): apparmor=“DENIED” operation=“getattr” class=“file” info=“Failed name lookup - disconnected path” error=-13 profile=“/usr/libexec/kloak/find_wl_compositor” name=“dev/null” pid=1405 comm=“find_wl_composi” requested_mask=“r” denied_mask=“r” fsuid=0 ouid=0
[ 263.146185] audit: type=1400 audit(1762100384.191:135): apparmor=“DENIED” operation=“open” class=“file” profile=“/usr/libexec/kloak/find_wl_compositor” name=“/etc/nsswitch.conf” pid=1405 comm=“find_wl_composi” requested_mask=“r” denied_mask=“r” fsuid=0 ouid=0
[ 263.146208] audit: type=1400 audit(1762100384.191:136): apparmor=“DENIED” operation=“open” class=“file” profile=“/usr/libexec/kloak/find_wl_compositor” name=“/etc/passwd” pid=1405 comm=“find_wl_composi” requested_mask=“r” denied_mask=“r” fsuid=0 ouid=0

arraybolt3 · November 2, 2025, 5:16pm

That’s progress!

helper-scripts is most likely out of date in the VM. You might need to enable the trixie-developers repository.

That looks very hopeful, hopefully that means the AppArmor fixes me and Patrick discussed above will fix it.

I don’t disagree, but Wayland restricts what we are and aren’t able to do in this regard. We need APIs for:

Emulated keyboard input
Emulated mouse input
Drawing a full screen transparent overlay for the virtual cursor for every monitor

Currently we use virtual-keyboard-unstable-v1, wlr-virtual-pointer-unstable-v1, and wlr-layer-shell-unstable-v1 for these things. Due to the varying support in compositors, this limits kloak to Sway, Hyprland, niri, labwc, Wayfire, and Mir at the moment. Support for KWin could theoretically be added by using the KDE fake-input protocol, but that would be a sizable job. I don’t know how emulated input is meant to work on GNOME, it might be possible but would likely also require involved workarounds.

HulaHoop · November 6, 2025, 9:20pm

I went ahead and changed the Whonix repo url to trixie-developers.

Tried downloading helper-scripts but it wasn’t installed on my host but it couldn’t find it.
Please note I’m trying to run kloak on my baremetal system which is a Debian Trixie KDE host.
A few versions ago it worked beautifully so I’m not sure that there’s something fundamentally broken or incompatible - though you’re implying this may be the case?

user@debian:~$ sudo apt install helper-scripts
[sudo] password for user:
Package helper-scripts is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

arraybolt3 · November 7, 2025, 12:45am

helper-scripts is a mandatory dependency of kloak at the moment (maybe that needs to be changed) because part of its code moved into helper-scripts because it needed to be shared with other components. @Patrick The code in particular is the routine for determining the PID of the process listening on a particular UNIX socket. Could we duplicate that code in kloak so that it would be more easily usable outside of the context of Whonix?

Patrick · November 7, 2025, 2:38pm

Yes.

arraybolt3 · November 9, 2025, 2:39am

AppArmor issues hopefully fixed:

Socket querying function added back to kloak:

Patrick · November 9, 2025, 9:29am

Added some fixed on top of it. Seems now perfect.