Letsencrypt error: cannot change profile for the next exec call: No such file or directory

Help
57

I would try deleting the two snap profiles from your apparmor list. If same as earlier:

I am not certain of the command so you may need to experiment. Here is one place for example of deleting profiles

https://doc.opensuse.org/documentation/leap/archive/42.3/security/html/book.security/cha.apparmor.commandline.html#sec.apparmor.commandline.del

@robbrandt Update: A couple things.

One, I just noticed this in the log you just posted. This looks to me like your apparmor is conflicting with more than just snap and certbot. freshclam is part of an antivirus tool (thanks google).

Nov 12 23:08:25 ip-172-30-0-148 kernel: [ 12.567916] audit: type=1400 audit(1636758505.388:27): apparmor="DENIED" operation="capable" profile="/usr/bin/freshclam" pid=907 comm="freshclam" capability=2 capname="dac_read_search"

Two, snapd may require some apparmor profiles. I am getting well beyond my skill set but found this thread. I think your apparmor may have more extensive problems. But, perhaps some of this will help or at least give you a better source (snapcraft) to help resolve problem.

2 Likes