qml apps packaged with click does not work with fglrx

[Maxim Ermilov]

qml apps has blank screen with amd fglrx driver (works fine with intel video card).

errors in console:

Setting of real/effective user Id to 0/0 failed
Error! Fail to load fglrx kernel module! Maybe you can switch to root user to load kernel module directly
libGL error: open uki failed (Operation not permitted)
libGL error: reverting to (slow) indirect rendering

[Colin Watson (cjwatson)]

I suspect this is a problem with AppArmor profiles. I may be wrong - but at least reassigning to apparmor-easyprof-ubuntu should draw the attention of the security team, who can reassign it somewhere more appropriate if need be.

[Jamie Strandboge (jdstrand)]

What is the output of the following after experiencing the problem:
$ grep DENIED /var/log/syslog

[Maxim Ermilov (zaspire)]

Oct 30 07:57:13 workstation kernel: [157888.601627] type=1400 audit(1383105433.503:1146): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/proc/modules" pid=10849 comm="cordova-ubuntu" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.804457] type=1400 audit(1383105433.707:1147): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/sys/devices/system/cpu/" pid=10849 comm="cordova-ubuntu" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.804548] type=1400 audit(1383105433.707:1148): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/proc/ati/major" pid=10849 comm="cordova-ubuntu" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.804600] type=1400 audit(1383105433.707:1149): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/proc/sys/kernel/modprobe" pid=10849 comm="cordova-ubuntu" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.807538] type=1400 audit(1383105433.711:1150): apparmor="DENIED" operation="exec" parent=10849 profile="org.apache.mobilespec_cordova_0.0.2" name="/bin/kmod" pid=10863 comm="cordova-ubuntu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.841272] type=1400 audit(1383105433.743:1151): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/dev/ati/card0" pid=10849 comm="cordova-ubuntu" requested_mask="rw" denied_mask="rw" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.841305] type=1400 audit(1383105433.743:1152): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/dev/ati/card0" pid=10849 comm="cordova-ubuntu" requested_mask="rw" denied_mask="rw" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.841321] type=1400 audit(1383105433.743:1153): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/dev/ati/card0" pid=10849 comm="cordova-ubuntu" requested_mask="rw" denied_mask="rw" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.841332] type=1400 audit(1383105433.743:1154): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/dev/ati/card0" pid=10849 comm="cordova-ubuntu" requested_mask="rw" denied_mask="rw" fsuid=1000 ouid=0
Oct 30 07:57:13 workstation kernel: [157888.841342] type=1400 audit(1383105433.743:1155): apparmor="DENIED" operation="open" parent=358 profile="org.apache.mobilespec_cordova_0.0.2" name="/dev/ati/card0" pid=10849 comm="cordova-ubuntu" requested_mask="rw" denied_mask="rw" fsuid=1000 ouid=0

[Jamie Strandboge (jdstrand)]

Please create /usr/share/apparmor/hardware/graphics.d/lp1246486 with the following contents:
  @{PROC}/ati/major rw,
  /dev/ati/card[0-9]* rw,

Then perform:
$ sudo apparmor_parser -r /var/lib/apparmor/profiles/click_org.apache.mobilespec_cordova_0.0.2

Then exercise your program and report back if it fixes the issue for you. If that doesn't work, please add the following to /usr/share/apparmor/hardware/graphics.d/lp1246486 and repeat the above steps:
  @{PROC}/modules r,
  /sys/devices/system/cpu/ r,

(I'd like to know if only the first two rules are needed). Please report if the application seems to work ok without the last two access even if apparmor is reporting denials.

Thanks!

[Launchpad Janitor (janitor)]

[Expired for apparmor-easyprof-ubuntu (Ubuntu) because there has been no activity for 60 days.]