[Stock Ticker] confinement too strict

[Florian W.]

The stock ticker app fails to start on 20130819 (and earlier images, difficult to reproduce in 0819 because the app search seems bugged..).

Apparently the networking policy group is missing from the security manifest, and it needs access to a config file. Not sure if more errors will come up after those are fixed.

/var/log/kern.log:
Aug 19 11:45:27 ubuntu-phablet kernel: [ 307.130157] type=1400 audit(1376912727.846:55): apparmor="DENIED" operation="create" parent=1 profile="com.ubuntu.stock-ticker-mobile_stock-ticker-mobile_0.3.7ubuntu1" pid=2363 comm="qmlscene" family="inet" sock_type="stream" protocol=0
Aug 19 11:45:28 ubuntu-phablet kernel: [ 307.547332] type=1400 audit(1376912728.266:56): apparmor="DENIED" operation="create" parent=1 profile="com.ubuntu.stock-ticker-mobile_stock-ticker-mobile_0.3.7ubuntu1" pid=2373 comm="bearerThread" family="inet" sock_type="stream" protocol=0
Aug 19 11:45:28 ubuntu-phablet kernel: [ 307.547393] type=1400 audit(1376912728.266:57): apparmor="DENIED" operation="create" parent=1 profile="com.ubuntu.stock-ticker-mobile_stock-ticker-mobile_0.3.7ubuntu1" pid=2373 comm="bearerThread" family="inet" sock_type="stream" protocol=0
Aug 19 11:45:28 ubuntu-phablet kernel: [ 307.621917] type=1400 audit(1376912728.336:58): apparmor="DENIED" operation="open" parent=1 profile="com.ubuntu.stock-ticker-mobile_stock-ticker-mobile_0.3.7ubuntu1" name="/etc/ssl/openssl.cnf" pid=2363 comm="qmlscene" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

[Sergio Schvezov (sergiusens)]

After adding the networking profile I still get access denials
http://pastebin.ubuntu.com/6003148/

[Florian W. (florian-will)]

There seem to be 2 or 3 different syntax versions for the security manifest on various wiki pages / installed click applications / QT Creator templates. I'm using this (i.e. no app name in the security manifest) in my own app and I can access the network just fine: (Syntax taken from https://wiki.ubuntu.com/SecurityTeam/Specifications/ApplicationConfinement/Manifest , section "Putting it all together")

{
    "policy_groups": [
     "networking",
     "audio"
    ],
    "policy_version": 1.0
}

[Ubuntu Phone Apps Jenkins Bot (ubuntu-phone-apps-jenkins-bot)]

Fix committed into lp:stock-ticker-mobile-app at revision None, scheduled for release in stock-ticker-mobile-app, milestone Unknown