[Bug]: Doesn't open in Ubuntu 24.04 LTS

[avj-vaibhav]

Can you reproduce this bug in the PWA?

Not applicable

Describe the bug

I have been using the deb package in Ubuntu 22.04, but when i migrated to 24.04, it does not open show up any UI. But when tried with debug step, UI shows but is Empty

What package are you using?

deb

Version

1.12.6

Reproduction steps

1. Follow the steps for debian/ubuntu from the Readme.md in Ubuntu 24.04 LTS
2. Install the software, double click on the icon to open it.
3. It does not show up any UI or process.

Expected Behavior

Debug

teams-for-linux --webDebug --logConfig='{}'

Additional context

Tried the debug step with --no-sandbox flag.
This is how the UI looks.

Trace log:

No config file found, using default values
all good with appLogLevels you aren't using them
Initialising logger with config: "{}"
10:16:34.798 › File logging at /root/.config/teams-for-linux/logs/main.log with level silly
10:16:34.800 › Console logging enabled with level silly
10:16:34.800 › Logger initialised
10:16:34.800 › configPath: /root/.config/teams-for-linux
10:16:34.800 › configFile: {}
[4983:0203/101634.914157:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101634.914203:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101634.914221:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101634.914239:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101634.914252:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

[4983:0203/101634.947950:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.006483:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.018632:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.019018:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
Authorization required, but no authorization protocol specified

10:16:35.020 › processArgs: [
  '/opt/teams-for-linux/teams-for-linux',
  '--webDebug',
  '--logConfig={}',
  '--no-sandbox'
]
10:16:35.021 › testing RegExp processArgs false
10:16:35.021 › testing RegExp processArgs false
10:16:35.021 › testing RegExp processArgs false
10:16:35.021 › testing RegExp processArgs false
Authorization required, but no authorization protocol specified

10:16:35.022 › Waiting for network...
10:16:35.022 › Testing network using net.request() for https://teams.microsoft.com
[5082:0203/101635.022401:ERROR:angle_platform_impl.cc(44)] Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
ERR: Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
[5082:0203/101635.022668:ERROR:gl_display.cc(497)] EGL Driver message (Critical) eglInitialize: Could not open the default X display.
[5082:0203/101635.022691:ERROR:gl_display.cc(767)] eglInitialize OpenGL failed with error EGL_NOT_INITIALIZED, trying next display type
Authorization required, but no authorization protocol specified

[5082:0203/101635.022804:ERROR:angle_platform_impl.cc(44)] Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
ERR: Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
[5082:0203/101635.022825:ERROR:gl_display.cc(497)] EGL Driver message (Critical) eglInitialize: Could not open the default X display.
[5082:0203/101635.022844:ERROR:gl_display.cc(767)] eglInitialize OpenGLES failed with error EGL_NOT_INITIALIZED
[5082:0203/101635.022863:ERROR:gl_display.cc(801)] Initialization of all EGL display types failed.
[5082:0203/101635.022894:ERROR:gl_ozone_egl.cc(26)] GLDisplayEGL::Initialize failed.
10:16:35.023 › Spellchecker is disabled!
[4983:0203/101635.037151:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[4983:0203/101635.041961:ERROR:browser_main_loop.cc(279)] Gtk: gtk_widget_add_accelerator: assertion 'GTK_IS_ACCEL_GROUP (accel_group)' failed
[4983:0203/101635.042097:ERROR:browser_main_loop.cc(279)] Gtk: gtk_widget_add_accelerator: assertion 'GTK_IS_ACCEL_GROUP (accel_group)' failed
[4983:0203/101635.042136:ERROR:browser_main_loop.cc(279)] Gtk: gtk_widget_add_accelerator: assertion 'GTK_IS_ACCEL_GROUP (accel_group)' failed
[4983:0203/101635.042166:ERROR:browser_main_loop.cc(279)] Gtk: gtk_widget_add_accelerator: assertion 'GTK_IS_ACCEL_GROUP (accel_group)' failed
[4983:0203/101635.043069:ERROR:browser_main_loop.cc(279)] Gtk: gtk_widget_add_accelerator: assertion 'GTK_IS_ACCEL_GROUP (accel_group)' failed
Authorization required, but no authorization protocol specified

[5082:0203/101635.059685:ERROR:angle_platform_impl.cc(44)] Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
ERR: Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
[5082:0203/101635.059761:ERROR:gl_display.cc(497)] EGL Driver message (Critical) eglInitialize: Could not open the default X display.
[5082:0203/101635.059787:ERROR:gl_display.cc(767)] eglInitialize OpenGL failed with error EGL_NOT_INITIALIZED, trying next display type
Authorization required, but no authorization protocol specified

[5082:0203/101635.059887:ERROR:angle_platform_impl.cc(44)] Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
ERR: Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Could not open the default X display.
[5082:0203/101635.059918:ERROR:gl_display.cc(497)] EGL Driver message (Critical) eglInitialize: Could not open the default X display.
[5082:0203/101635.059943:ERROR:gl_display.cc(767)] eglInitialize OpenGLES failed with error EGL_NOT_INITIALIZED
[5082:0203/101635.059967:ERROR:gl_display.cc(801)] Initialization of all EGL display types failed.
[5082:0203/101635.059992:ERROR:gl_ozone_egl.cc(26)] GLDisplayEGL::Initialize failed.
[5082:0203/101635.061339:ERROR:viz_main_impl.cc(181)] Exiting GPU process due to errors during initialization
Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

[5121:0203/101635.126594:ERROR:angle_platform_impl.cc(44)] DisplayVkXcb.cpp:58 (initialize): xcb_connect() failed, error 1
ERR: DisplayVkXcb.cpp:58 (initialize): xcb_connect() failed, error 1
[5121:0203/101635.126661:ERROR:angle_platform_impl.cc(44)] Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Not initialized.
ERR: Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Not initialized.
[5121:0203/101635.126691:ERROR:gl_display.cc(497)] EGL Driver message (Critical) eglInitialize: Not initialized.
[5121:0203/101635.126714:ERROR:gl_display.cc(767)] eglInitialize SwANGLE failed with error EGL_NOT_INITIALIZED
[5121:0203/101635.126750:ERROR:gl_display.cc(801)] Initialization of all EGL display types failed.
[5121:0203/101635.126777:ERROR:gl_ozone_egl.cc(26)] GLDisplayEGL::Initialize failed.
Authorization required, but no authorization protocol specified

[5121:0203/101635.163240:ERROR:angle_platform_impl.cc(44)] DisplayVkXcb.cpp:58 (initialize): xcb_connect() failed, error 1
ERR: DisplayVkXcb.cpp:58 (initialize): xcb_connect() failed, error 1
[5121:0203/101635.163308:ERROR:angle_platform_impl.cc(44)] Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Not initialized.
ERR: Display.cpp:1083 (initialize): ANGLE Display::initialize error 12289: Not initialized.
[5121:0203/101635.163341:ERROR:gl_display.cc(497)] EGL Driver message (Critical) eglInitialize: Not initialized.
[5121:0203/101635.163368:ERROR:gl_display.cc(767)] eglInitialize SwANGLE failed with error EGL_NOT_INITIALIZED
[5121:0203/101635.163416:ERROR:gl_display.cc(801)] Initialization of all EGL display types failed.
[5121:0203/101635.163452:ERROR:gl_ozone_egl.cc(26)] GLDisplayEGL::Initialize failed.
[5121:0203/101635.164429:ERROR:viz_main_impl.cc(181)] Exiting GPU process due to errors during initialization
Authorization required, but no authorization protocol specified

Authorization required, but no authorization protocol specified

[5133:0203/101635.178151:ERROR:x11_software_bitmap_presenter.cc(150)] XGetWindowAttributes failed for window 20971524
10:16:35.310 › Network test successful with method https
[4983:0203/101635.779459:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
10:16:35.779 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
[4983:0203/101635.780233:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[4983:0203/101635.780320:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.780366:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[4983:0203/101635.780398:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.780414:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[4983:0203/101635.780451:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.780467:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[4983:0203/101635.780504:ERROR:bus.cc(407)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[4983:0203/101635.780521:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: 
[4983:0203/101635.782415:ERROR:CONSOLE(1)] "Request Autofill.enable failed. {"code":-32601,"message":"'Autofill.enable' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[4983:0203/101635.782496:ERROR:CONSOLE(1)] "Request Autofill.setAddresses failed. {"code":-32601,"message":"'Autofill.setAddresses' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[4983:0203/101636.430594:ERROR:CONSOLE(1)] "Uncaught (in promise) SyntaxError: Unexpected token 'H', "HTTP/1.1 4"... is not valid JSON", source: devtools://devtools/bundled/devtools_app.html?remoteBase=https://chrome-devtools-frontend.appspot.com/serve_file/@878cb2245944be9dd68beea237f30a58fa63e20/&can_dock=true&toolbarColor=rgba(223,223,223,1)&textColor=rgba(0,0,0,1)&experiments=true (1)
10:16:37.064 › did-frame-finish-load {} true
10:16:37.064 › did-finish-load
10:16:38.430 › did-frame-finish-load {} false
10:16:38.762 › assignOnDidFailLoadEventHandler : {} - -3 - 
10:16:39.013 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:16:39.386 › did-frame-finish-load {} true
10:16:39.387 › did-finish-load
[4983:0203/101640.287900:ERROR:CONSOLE(1)] "Request Autofill.enable failed. {"code":-32601,"message":"'Autofill.enable' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[4983:0203/101640.287959:ERROR:CONSOLE(1)] "Request Autofill.setAddresses failed. {"code":-32601,"message":"'Autofill.setAddresses' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
10:16:40.298 › did-frame-finish-load {} false
10:16:49.019 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:16:59.020 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:17:09.020 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:17:19.022 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:17:29.023 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:17:39.024 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:17:49.025 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:17:59.026 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:18:09.027 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:18:19.029 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:18:29.030 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:18:39.031 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
10:18:49.032 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'

[IsmaelMartinez]

It does look like the apparmour change ubuntu did. See #1426 (comment) for more info but you basically need to create an apparmour profile. See if that works for you

[avj-vaibhav]

Okay thanks, will try this out.

[nicola1695]

Even after updating to ubuntu 24.04 I can no longer open teams-for-linux.

If I run the command
teams-for-linux --webDebug --logConfig='{}'

I get the following message:

[6186:0213/110644.061793:FATAL:setuid_sandbox_host.cc(163)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /opt/teams-for-linux/chrome-sandbox is owned by root and has mode 4755.
[1]    6186 trace trap (core dumped)  teams-for-linux --webDebug --logConfig='{}'

If I run the command with the --no-sandbox flag then the application opens and the UI works and in the meantime I read the following logs:

No config file found, using default values
all good with appLogLevels you aren't using them
Initialising logger with config: "{}"
11:04:45.039 › File logging at /home/nicola/.config/teams-for-linux/logs/main.log with level silly
11:04:45.040 › Console logging enabled with level silly
11:04:45.041 › Logger initialised
11:04:45.041 › configPath: /home/nicola/.config/teams-for-linux
11:04:45.041 › configFile: {}
11:04:45.043 › Running under Wayland, switching to PipeWire...
11:04:45.295 › processArgs: [
  '/opt/teams-for-linux/teams-for-linux',
  '--webDebug',
  '--no-sandbox',
  '--logConfig={}'
]
11:04:45.296 › testing RegExp processArgs false
11:04:45.296 › testing RegExp processArgs false
11:04:45.297 › testing RegExp processArgs false
11:04:45.297 › testing RegExp processArgs false
11:04:45.297 › Waiting for network...
11:04:45.297 › Testing network using net.request() for https://teams.microsoft.com
11:04:45.299 › Spellchecker is disabled!
[5629:0213/110445.485596:ERROR:CONSOLE(36)] "Error: electron-log isn't initialized in the main process. Please call log.initialize() before. Error invoking remote method '__ELECTRON_LOG__': WebContents was destroyed", source: /opt/teams-for-linux/resources/app.asar/node_modules/electron-log/src/renderer/electron-log-preload.js (36)
11:04:45.680 › Network test successful with method https
11:04:45.680 › Loading initial URL...
[5629:0213/110445.687569:ERROR:CONSOLE(1)] "Unknown VE context: language-mismatch    at new He (devtools://devtools/bundled/ui/legacy/legacy.js:1:98356)
    at devtools://devtools/bundled/ui/legacy/legacy.js:1:191793
    at new oi (devtools://devtools/bundled/ui/legacy/legacy.js:1:192189)
    at oi.instance (devtools://devtools/bundled/ui/legacy/legacy.js:1:192311)
    at O.presentUI (devtools://devtools/bundled/panels/emulation/emulation.js:1:58454)
    at #I (devtools://devtools/bundled/entrypoints/main/main.js:1:17314)
    at #x (devtools://devtools/bundled/entrypoints/main/main.js:1:17109)", source: devtools://devtools/bundled/ui/visual_logging/visual_logging.js (1)
11:04:46.363 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
[5629:0213/110446.364770:ERROR:object_proxy.cc(576)] Failed to call method: org.freedesktop.ScreenSaver.GetActive: object_path= /org/freedesktop/ScreenSaver: org.freedesktop.DBus.Error.NotSupported: This method is not part of the idle inhibition specification: https://specifications.freedesktop.org/idle-inhibit-spec/latest/
[5629:0213/110446.366872:ERROR:CONSOLE(1)] "Request Autofill.enable failed. {"code":-32601,"message":"'Autofill.enable' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[5629:0213/110446.366933:ERROR:CONSOLE(1)] "Request Autofill.setAddresses failed. {"code":-32601,"message":"'Autofill.setAddresses' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
11:04:46.789 › did-frame-finish-load {} true
11:04:46.789 › did-finish-load
11:04:47.653 › cookie changed cause: overwrite 
 removed?: true 

11:04:47.653 › cookie: authtoken 
 expirationDate: 1739516170.155421 
 domain: teams.microsoft.com
11:04:47.654 › cookie changed cause: explicit 
 removed?: false 

11:04:47.654 › cookie: authtoken 
 expirationDate: 1739516169.653368 
 domain: teams.microsoft.com
11:04:48.127 › Badge count set to '0'
11:04:48.138 › Badge count set to '0'
11:04:48.920 › Badge count set to '0'
11:04:51.197 › Badge count set to '1'
[5629:0213/110451.381942:ERROR:CONSOLE(1)] "Request Autofill.enable failed. {"code":-32601,"message":"'Autofill.enable' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[5629:0213/110451.382002:ERROR:CONSOLE(1)] "Request Autofill.setAddresses failed. {"code":-32601,"message":"'Autofill.setAddresses' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
11:04:51.389 › did-frame-finish-load {} false
11:04:52.739 › Badge count set to '1'
11:04:52.786 › did-frame-finish-load {} false
[5629:0213/110453.003027:ERROR:CONSOLE(1)] "Request Autofill.enable failed. {"code":-32601,"message":"'Autofill.enable' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[5629:0213/110453.003065:ERROR:CONSOLE(1)] "Request Autofill.setAddresses failed. {"code":-32601,"message":"'Autofill.setAddresses' wasn't found"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
11:04:53.109 › did-frame-finish-load {} false
[5732:0213/110454.136272:ERROR:gl_surface_presentation_helper.cc(260)] GetVSyncParametersIfAvailable() failed for 1 times!
11:04:56.389 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
[5732:0213/110503.139869:ERROR:gl_surface_presentation_helper.cc(260)] GetVSyncParametersIfAvailable() failed for 2 times!
11:05:06.391 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'
11:05:16.392 › GetSystemIdleState => IdleTimeout: 300s, IdleTimeoutPollInterval: 10s, ActiveCheckPollInterval: 2s, IdleTime: 0s, IdleState: 'active'

[nicola1695]

[Solution to my problem]
I solved it with the following commands:

sudo chown root:root /opt/teams-for-linux/chrome-sandbox
sudo chmod 4755 /opt/teams-for-linux/chrome-sandbox   

[IsmaelMartinez]

@nicola1695 , thanks for the reply. FYI, that will only solve it for this version. When you get an update you will need to do it again. If you want a more permanent solution, do the apparmour profile mentioned in #1426 (comment)