Linux Mint and Site Domains

Support
,
1

What issue or error are you experiencing?

It’s the same issue as described here, the line below fixed it for me.

sudo sysctl -w net.ipv4.ip_unprivileged_port_start=0

But when I ran sudo aa-status AppArmor returned nginx under the ‘unconfined but have a profile defined’.

The post here mentions “If AppArmor isn’t interfering with nginx”, I don’t know if the “unconfined but have a profile defined” counts as interfering, and if that means there are other things that I can try other then changing the unprivileged ports which is described as a security risk in the linked post.

What steps can be taken to replicate the issue? Feel free to include screenshots, videos, etc
Setting router mode to Site Domains and launching a site

System Details

  • Local Version: 9.2.9

  • Operating System (OS) and OS version: 22.3

Local Logs

Attach your Local Logs here (Help Doc - Retrieving Local’s Log)

Security Reminder
Local does a pretty good job of scrubbing private info from the logs and the errors it produces, however there’s always the possibility that something private can come through. Because these are public forums, always review the screenshots you are sharing to make sure there isn’t private info like passwords being displayed.

2

Hi @Tijmen! I’m not intimately familiar with AppArmor but I did some searching and it seems that when AppArmor reports a process as “unconfined but have a profile defined,” it means a profile exists in /etc/apparmor.d/ but isn’t actively protecting the running application, often because the app started before the profile was loaded or enabled, requiring a restart or reload to enforce it; you could try to use sudo aa-enforce /path/to/profile or sudo apparmor_parser -a /path/to/profile, then restart the application to apply confinement.