Where does the bug appear (feature/product)? Cursor IDE Describe the Bug Cursor starts agent shell tool calls via: /usr/share/cursor/resources/app/resources/helpers/cursorsandbox A tool call got stuck. The process was owned by my user, but sudo kill failed: sudo kill kill: (): Permission denie…

This is a known bug. The AppArmor profile shipped with Cursor doesn’t include signal rules, so on Ubuntu 24.04+ (which enables signal mediation by default), signals from outside the sandbox boundary get blocked. Your workaround is exactly right. Our team is tracking this and working on updating the…

Hey @v_frolov , The fix for sandbox processes being unkillable by root on Ubuntu 24.04+ shipped in a recent Cursor update. The bundled AppArmor profile now includes the signal (receive) rule you added as a workaround. Updating to the latest version (3.7.27+) should resolve this!

Cursor AppArmor profile prevents root from killing stuck cursorsandbox process

Support Bug Reports

Topic		Replies	Views
Critical Governance Issue: cursor_sandbox and Seccomp blocking Root/Sudo kill signals (EACCES) Bug Reports sandbox , terminal , linux	9	326	June 30, 2026
Sandbox processes persist after Cursor exit and cannot be killed by user Bug Reports sandbox , linux	9	326	July 20, 2026
Orphan cursorsandbox cannot be killed (AppArmor signal denial); survives Cursor restart Bug Reports sandbox , terminal , linux	1	82	May 21, 2026
2.4.22 AppArmor prevents remote SSH connection Bug Reports sandbox , ssh , linux	7	419	February 20, 2026
Linux: terminal sandbox preflight fails — `uid_map` EPERM after mitigations (earlier: loopback error) Bug Reports sandbox , terminal , linux	2	69	March 27, 2026

Cursor AppArmor profile prevents root from killing stuck cursorsandbox process

Related topics