Arch Linux

dab9966

Member

Registered: 2023-12-05

Posts: 44

Issue with /usr/share/X11/xkb

This is just to share that I updated packages today and many of my applications have failed to start due to having either AppArmor or Bwrap enforced.

Example error:

~ librewolf
xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb

It appears the path has either changed or is being updated, I haven't had a time to look it up properly, but FYI now you have to add this path for the application to work:

/usr/share/xkeyboard-config-2

Example bwrap:

--ro-bind /usr/share/xkeyboard-config-2 /usr/share/xkeyboard-config-2

Example apparmor:

/usr/share/xkeyboard-config-2/{keycodes,rules,types,compat,symbols}/{,**} r,

This might be related - https://bugs.gentoo.org/957712

Not sure if this is correct forum group, if its incorrect please move as appropriate. Thanks!

This might also be a one-off post, in where I start to experience issues in where apparmor and bwrap is enforced (still learning), whereas on default distros without these being enforced everything should be fine.  So probably should only affect people with this enabled. I think this is something I will be experiencing from time to time, so I will probably not post any of these issues after, but it would be good to have a place in where we can post such small announcements

adventurer

Member

Registered: 2014-05-04

Posts: 127

Re: Issue with /usr/share/X11/xkb

I can confirm this. I had to add the AppArmor rule to my profiles for xwayland, xorg, kwin_wayland, systemd-localed (I'm using the profiles from apparmor.d-git) as I couldn't login.

Once that problem was solved I couldn't start various programs like Firefox so I had to add that rule there as well.

The problem occurs also for programs sandboxed with Firejail. Here adding

whitelist /usr/share/xkeyboard-config-2
read-only /usr/share/xkeyboard-config-2

fixed the problem.

See also https://github.com/roddhjav/apparmor.d/issues/760

Last edited by adventurer (2025-06-11 17:16:08)