I reported another problem in the apparmor bugtracker https://gitlab.com/apparmor/apparmor/-/issues/229 In short the default session path is /tmp which is NOT ALLOWED The allowed one are # php session mmap socket /var/lib/php{,5,7,8}/session_mm_* rwlk, # file based session handler /var/lib/php{,5,7,8}/sess_* rwlk, /var/lib/php{,5,7,8}/sessions/* rwlk,