Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 co

29 December 2020, 07:44:58

Experts,

I am running

5.9.16.a-1-hardened

. When I try to load apparmor profile with the following command

Code: [Select]

apparmor_parser -r /etc/apparmor.d/firejail-default

I am getting the following error:

Code: [Select]

>>> apparmor_parser -r /etc/apparmor.d/firejail-default
Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.)
Warning: unable to find a suitable fs in /proc/mounts, is it mounted?
Use --subdomainfs to override.

I am getting the same error message with the

Code: [Select]

linux-lts 5.4.84-1

. Is this a kernel specific issue or something that I am not doing right. I followed the firejail section of Arch wiki. I have

Code: [Select]

apparmor 3.0.1-1

installed.

What is on the first place

Quote

Kernel needs AppArmor 2.4 compatibility patch

is?Does this mean, kernel from the repositories doesn't include the compatibility patch? If so, how am I supposed to install and maintain? Manually every time kernel gets updated?

Any suggestion on how do I go about trouble shoot and solve this issue?

Re: Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 co

Reply #1 – 29 December 2020, 07:55:06

How you enable apparmor ?
Read https://wiki.archlinux.org/index.php/AppArmor#Installation too
Probably you not activated apparmor at boot

Re: Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 co

Reply #2 – 29 December 2020, 08:28:57

Thanks mate. Indeed, I did not set the kernel parameters.

Thanks once again.