Hi all,
On a Linux Jumpoint, in order for the Web Jump to work, there are a few dependencies that need to be corrected, most of which are included in the POST_INSTALLATION_NOTES text file, like the following:
*** NOTE ***
If the Web Jump feature is going to be used on Ubuntu 24.04+ or on a similarly
derived Linux distribution, then an AppArmor profile needs to be added by running:
sudo cp "/home/user/Jumpoint/apparmor-profile" /etc/apparmor.d/sra-jpt-1770209519
sudo apparmor_parser -r /etc/apparmor.d/sra-jpt-1770209519
Another dependency is the X11 driver, which is included in the KB for the installation of the Jumpoint (Install a Linux Jumpoint | RS).
However, even after completing the above steps, I was getting the following error:
/home/user/Jumpoint/sra-web failed with exit code 133 -- Likely the AppArmor configuration needs to be performed on the Jumpoint. See the POST-INSTALL-NOTES.txt in its installation folder for details.
Checking the dmesg event logs, I detected the following error:
[442312.158612] audit: type=1400 audit(1770211027.410:931): apparmor="DENIED" operation="capable" class="cap" profile="unprivileged_userns" pid=1233468 comm="sra-web.bin" capability=21 capname="sys_admin" [442312.159301] traps: sra-web.bin[1233466] trap int3 ip:7266ca855431 sp:7266bd7f8390 error:0 in libcef.so[7654431,7266c5a4a000+b164000]
So, I was now being blocked not by the SRA AppArmor profile, but by the unprivileged_userns profile.
Issue was fixed after allowing unprivileged user namespaces:
sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
