dolphin is denied almost everything

[callmeclover]

Dolphin and KDED6 are denied almost every request they make. Relevant aa-log snippet:

DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#306 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#307 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#308 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#309 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#310 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#311 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kdedefaults/kdeglobals comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kdeglobals comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/dolphinrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /dev/tty comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/icons/breeze/index.theme comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/flatpak/exports/share/icons/hicolor/index.theme comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/color-schemes/BreezeLight.colors comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kdedefaults/kcminputrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kcminputrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/glvnd/egl_vendor.d/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/qt6/translations/qt_en.qm comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/breezerc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kdedefaults/kwinrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kwinrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/mime/mime.cache comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/mime/packages/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /var/lib/flatpak/exports/share/mime/mime.cache comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /var/lib/flatpak/exports/share/mime/packages/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/mime/mime.cache comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/mime/packages/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/icons/breeze/icon-theme.cache comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/icons/hicolor/icon-theme.cache comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open @{PROC}/sys/kernel/random/boot_id comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/kservicemenurc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_state_dirs}/dolphinstaterc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/baloofilerc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/user-places.xbel comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/user-dirs.dirs comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/#@{int8} comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open /etc/fstab comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{PROC}/@{pid}/mountinfo comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{PROC}/@{pid}/mounts comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin create info="failed af match" comm=dolphin family=netlink sock_type=raw protocol=15 requested_mask=create denied_mask=create error=-13
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/trashrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /etc/fonts/fonts.conf comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /etc/fonts/conf.d/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/local/share/fonts/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_cache_dirs}/fontconfig/@{hex32}-le64.cache-9 comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_cache_dirs}/fontconfig/@{hex32}-le64.cache-9 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open /usr/share/fonts/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /var/cache/fontconfig/@{hex32}-le64.cache-9 comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_cache_dirs}/fontconfig/@{hex32}-le64.cache-9 comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_cache_dirs}/fontconfig/@{hex32}-le64.cache-9 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/color-schemes/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open /usr/share/color-schemes/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin mknod owner @{user_config_dirs}/dolphinrc.lock comm=dolphin requested_mask=c denied_mask=c
DENIED  @{bin}/dolphin open /usr/share/thumbnailers/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner /tmp/#636 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#637 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#638 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#639 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#640 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/session/dolphin_dolphin_dolphin comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_state_dirs}/UserFeedback.org.kde.dolphin comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_config_dirs}/KDE/UserFeedback.conf comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_state_dirs}/UserFeedback.org.kde.dolphin comm=dolphin requested_mask=wrc denied_mask=wrc
DENIED  @{bin}/dolphin open @{sys}/bus/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open @{sys}/class/ comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open @{sys}/devices/@{pci}/ata1/host0/target0:0:0/0:0:0:0/block/sda/sda1/uevent comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open @{sys}/devices/@{pci}/ata2/host1/target1:0:0/1:0:0:0/block/sdb/uevent comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open @{sys}/devices/@{pci}/usb4/4-4/4-4@{busname}/host6/target6:0:0/6:0:0:0/block/sdc/sdc3/uevent comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_cache_dirs}/ksycoca6_en_cxMCw1BanOLU_CsBGscsOg1A5Cg= comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin mknod owner @{user_cache_dirs}/ksycoca6_en_cxMCw1BanOLU_CsBGscsOg1A5Cg=.lock comm=dolphin requested_mask=c denied_mask=c
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#314 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#315 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#316 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open /opt/cuda/targets/@{arch}-linux/lib/libOpenCL.so.1.0.0 comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#317 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#318 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open /usr/share/knotifications6/plasma_workspace.notifyrc comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{user_share_dirs}/#@{int8} comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{PROC}/@{pid}/mountinfo comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner @{PROC}/@{pid}/mounts comm=dolphin requested_mask=r denied_mask=r
DENIED  @{bin}/dolphin open owner /tmp/#641 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#642 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#643 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#644 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner /tmp/#645 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#321 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#322 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#323 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#324 comm=dolphin requested_mask=wr denied_mask=wr
DENIED  @{bin}/dolphin open owner @{run}/user/@{uid}/#325 comm=dolphin requested_mask=wr denied_mask=wr
ALLOWED plasma-browser-integration-host open owner @{user_config_dirs}/breezerc comm=plasma-browser- requested_mask=r denied_mask=r
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#329 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#330 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#331 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#332 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#333 comm=kded6 requested_mask=wr denied_mask=wr
DENIED  @{bin}/kded6 open owner @{run}/user/@{uid}/#334 comm=kded6 requested_mask=wr denied_mask=wr

[nobody43]

KDE still requires a lot of work. What's your distro? Are you past this PR: #955?

[callmeclover]

KDE still requires a lot of work. What's your distro? Are you past this PR: #955?

Arch Linux, 6.18.2-zen-2-1-zen, latest version of both apparmor (extra/apparmor) and apparmor.d (aur/apparmor.d)

[nobody43]

Profiles for rolling distros will be always outdated. When using them you should consider contributing.

[eject7455]

https://apparmor.pujol.io/configuration/

By default, nautilus (and any file browser) only allows access to user files. Thus, your cannot browse system files such as /etc/, /srv/, /var/. You can change this behavior by creating a local profile addition file for nautilus: