<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> </head> <body text="#000000" bgcolor="#FFFFFF"> <blockquote type="cite" cite="mid:474d452b-3a6c-eff6-bf5a-cc3611301b24@gmail.com"> <pre wrap="">Just use flags=(attach_disconnected): /some/app flags=(attach_disconnected) { I have one question though. Why does the system (or just AppArmor) think that the file is "var/lib/..." and not "/var/lib/..."? </pre> </blockquote> No idea, apparmor rookie here. But I can say that this the profile is applied to a docker container, like this: docker run ... --security-opt apparmor=myprofile my-machine maybe it has something to do. <blockquote type="cite" cite="mid:474d452b-3a6c-eff6-bf5a-cc3611301b24@gmail.com"> <pre wrap="">One of my apps behaves differently depending on how the X-server is started. When I use just the "startx" command issued via TTY, the attach_disconnected is needed. But when I start the X-server using some DM, like for instance SDDM, the app works fine without the flag. So why is that? </pre> </blockquote> Maybe something is launched inside a terminal but another no? Just guessing. When is a terminal allocated and under which conditions? <blockquote type="cite" cite="mid:474d452b-3a6c-eff6-bf5a-cc3611301b24@gmail.com"> <pre wrap=""> </pre>  <fieldset class="mimeAttachmentHeader"></fieldset> </blockquote> </body> </html>