topic Re: Webex needs apparmor profile for ubuntu 24.04 in Webex Meetings and Webex App

Webex needs apparmor profile for ubuntu 24.04

Michael.Heimann — Wed, 24 Apr 2024 14:33:51 GMT

If webex is used in ubuntu 24.04 there's an apparmor error logged like this:

audit: type=1400 audit(1713968367.781:343): apparmor="DENIED" operation="capable" class="cap" profile="unprivileged_userns" pid=10844 comm="CiscoCollabHost" capability=21 capname="sys_admin"

This leads to an error in libcef.so and so Webex cannot start.
Since Cisco didn't properly include a repository for Webex, the update relies on the app running. So, this breaks updates and Webex cannot get an update that will probably fix this in the future.

I did fix this bug by adding a apparmor profile for Webex into a new file here "/etc/apparmor.d/Webex":

abi <abi/4.0>, include <tunables/global> profile Webex /opt/Webex/bin/CiscoCollabHost flags=(unconfined) { userns, # Site-specific additions and overrides. See local/README for details. include if exists <local/Webex> }

Afterwards you need to reload the profiles with

sudo systemctl reload apparmor

Have fun!

Re: Webex needs apparmor profile for ubuntu 24.04

Paul Stafford — Fri, 07 Jun 2024 20:40:49 GMT

I just upgraded to Ubuntu 24.04, and I can't get Webex to run at all.
I couldn't get it to install, I was getting libegl1-mesa_23 dependency issues due to there not being those packages for 24.04, and someone recommended using the one from 22.04 which I did, and it installed, but it still doesn't start.

When I run /opt/Webex/bin/CiscoCollabHost %U from the command line, all I get is this message then it returns me to the command prompt:
Wx: X error received: type 0, serial 9, error_code 3, request_code 12, minor_code 0
Wx: X error received: type 0, serial 10, error_code 3, request_code 8, minor_code 0

Any ideas?

Thanks,
Paul

Re: Webex needs apparmor profile for ubuntu 24.04

Paul Stafford — Fri, 07 Jun 2024 20:50:05 GMT

I install the libegl dev tools and rebooted and now it is working.

Thanks,
Paul

Re: Webex needs apparmor profile for ubuntu 24.04

m-reuter — Tue, 02 Jul 2024 16:05:52 GMT

Aloha,
I migrated this weekend from Macos to ubuntu 24.4
Rellay glad that I did this. works much better than mac.
But hey Cisco, can you not provide updated SW also for Linux?
Im kind of Linux newbie and dont know, what will be the implications, if I install now the old "libegl1-mesa_23" package. Could it break anything?

Thanks

Marcel

Re: Webex needs apparmor profile for ubuntu 24.04

Martin Sloan — Wed, 14 Aug 2024 18:07:57 GMT

Thanks for sharing!

Re: Webex needs apparmor profile for ubuntu 24.04

m-reuter — Fri, 23 Aug 2024 06:59:45 GMT

Hi Paul,

do you mean this package:

libegl-dev/noble,now 1.7.0-1build1 amd64 [installed]
Vendor neutral GL dispatch library -- EGL development files

I installed that too, but still receive this error, when I try to install Webex.deb:

apt-get install ./Webex.deb
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'webex' instead of './Webex.deb'
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
webex : Depends: libgl1-mesa-glx but it is not installable
E: Unable to correct problems, you have held broken packages.

Re: Webex needs apparmor profile for ubuntu 24.04

m-reuter — Fri, 23 Aug 2024 07:44:31 GMT

I found a old package under this link:

https://askubuntu.com/questions/1489226/ubuntu-23-10-missing-packages-libgl1-mesa-and-libgl1-mesa-glx-when-installing-zo

Downloaded this package:

https://launchpad.net/ubuntu/+archive/primary/+files/libgl1-mesa-glx_23.0.4-0ubuntu1%7E22.04.1_amd64.deb

Then I could install Webex

To Cisco: Seriouly?

Re: Webex needs apparmor profile for ubuntu 24.04

m-reuter — Fri, 23 Aug 2024 08:01:25 GMT

Webex is installed, but it doesnt start. GUI nothing happed.

from CLI:

~ /opt/Webex/bin/CiscoCollabHost -%U
/opt/Webex/bin/CiscoCollabHost -%U
➜ ~ Wx: X error received: type 0, serial 9, error_code 3, request_code 12, minor_code 0
Wx: X error received: type 0, serial 10, error_code 3, request_code 8, minor_code 0

But the libegl-dev tools are installed:

apt search Libegl-dev
Sorting... Done
Full Text Search... Done
libegl-dev/noble,now 1.7.0-1build1 amd64 [installed]
Vendor neutral GL dispatch library -- EGL development files

do I miss anything else?

Thanks

Marcel

Re: Webex needs apparmor profile for ubuntu 24.04

ntzv — Thu, 05 Sep 2024 08:57:01 GMT

Hi,
I solved this problem with the solution proposed on this topic :

https://community.cisco.com/t5/webex-meetings-and-webex-app/installing-webex-app-on-ubuntu-24-04/td-p/5163446

Re: Webex needs apparmor profile for ubuntu 24.04

lmoeller — Fri, 06 Sep 2024 07:58:04 GMT

This helped resolve my issues starting Webex after the upgrade from 22.04 to 24.04. The cli didn't return anything that could help debugging so this was a shot into the blue - and it obviously was the cause of the trouble.

Thank you for sharing!

Re: Webex needs apparmor profile for ubuntu 24.04

Parsa-K — Tue, 10 Sep 2024 10:00:53 GMT

Just created an account to upvote your post and to thank you!

That was a super simple solution without any need to install any extra packages. Thanks a lot!

Re: Webex needs apparmor profile for ubuntu 24.04

ohumbel — Fri, 27 Sep 2024 09:41:34 GMT

Thank you for sharing this - it really helped!

Re: Webex needs apparmor profile for ubuntu 24.04

ceppenge — Tue, 01 Apr 2025 03:42:27 GMT

This works for 22.04/24.04, but what would be the correct profile to work with Debian 12? Debian 12 only supports apparmor 3.0

Re: Webex needs apparmor profile for ubuntu 24.04

cmin — Thu, 09 Oct 2025 05:29:45 GMT

Note that profiles with different naming and directing to the same executables will result in conflict and neither will take effect.

So if you have both

profile Webex /opt/Webex/bin/CiscoCollabHost flags=(unconfined)

And

profile webex /opt/Webex/bin/CiscoCollabHost flags=(unconfined)

Remove the one with capitalized 'Webex', for Webex is now adding its own profile with lower-cased style. You may also need to reboot for the removal to actuall take effect.