cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
298
Views
1
Helpful
0
Replies

Webex needs apparmor profile for ubuntu 24.04

Michael.Heimann
Level 1
Level 1

If webex is used in ubuntu 24.04 there's an apparmor error logged like this:

audit: type=1400 audit(1713968367.781:343): apparmor="DENIED" operation="capable" class="cap" profile="unprivileged_userns" pid=10844 comm="CiscoCollabHost" capability=21  capname="sys_admin"

This leads to an error in libcef.so and so Webex cannot start.
Since Cisco didn't properly include a repository for Webex, the update relies on the app running. So, this breaks updates and Webex cannot get an update that will probably fix this in the future.

I did fix this bug by adding a apparmor profile for Webex into a new file here "/etc/apparmor.d/Webex":

abi <abi/4.0>,
include <tunables/global>

profile Webex /opt/Webex/bin/CiscoCollabHost flags=(unconfined) {
  userns,

  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/Webex>
}

Afterwards you need to reload the profiles with

sudo systemctl reload apparmor


Have fun!



0 Replies 0