AppArmor preventing firefox from using azureus

[Exquisite Dead Guy]

Binary package hint: apparmor

Not sure if I'm filing this in the right place, so apologies if not, but since my upgrade to 9.10, I can no longer open torrent files from Firefox as I used to, I have to save them, then open them from nautilus. If I choose Open with... in the download dialog, it fails silently leaving this message in the syslog:

ubuntu kernel: [249777.826652] type=1503 audit(1258211064.349:33): operation="exec" pid=20837 parent=14420 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/azureus"

Thanks

[Jamie Strandboge (jdstrand)]

Thank you for using Ubuntu and taking the time to report a bug.

Can you add the following to /etc/apparmor.d/usr.bin.firefox-3.5:
   /usr/bin/azureus Uxr,

Then perform:
$ sudo apparmor_parser -r -T -W /etc/apparmor.d/usr.bin.firefox-3.5

and report back if it fixes the issue for you?

[Exquisite Dead Guy (ben-forlent)]

Jamie: That worked like a charm. Thanks for your help! Let me know if you need any info from me to find out if it's a bug....

[roblubbers (roblubbers-deactivatedaccount)]

I had a similar problem with transmission. The fix Jamie suggested also works for transmission. Sadly the gnome theme installer is also effected by this bug.

[Exquisite Dead Guy (ben-forlent)]

I've found I can't open openoffice files either as I could before the upgrade. I have to save them then open from nautilus.

[Jamie Strandboge (jdstrand)]

The openoffice issue is a different bug and most likely is because soffice is not in the profile. See bug #447006.

[Launchpad Janitor (janitor)]

This bug was fixed in the package firefox-3.5 - 3.5.6+nobinonly-0ubuntu1

---------------
firefox-3.5 (3.5.6+nobinonly-0ubuntu1) lucid; urgency=low

  * New upstream release v3.5.6 (FIREFOX_3_5_6_RELEASE)
    - see USN-874-1

  [ Micah Gersten <email address hidden> ]
  * Bump minimum system cairo to 1.8.8
    - update debian/rules
  * Fix .desktop Name field for Slovak translation (LP: 448683)
    - update debian/firefox-3.5-final.desktop
  * Fix .desktop Name field for Estonian and Arabic translations
    (LP: 419507, LP: 321239)
    - update debian/firefox-3.5-final.desktop

  [ Jamie Strandboge <email address hidden> ]
  * AppArmor fixes:
    - allow access to nautilus, to allow "Open containing folder" to work
      (LP: #452591)
    - allow access for deluge (LP: #455792)
    - work better with KDE by adding kde abstraction, allow access to soffice,
      allow access to okular and read access to /etc/fstab (for print dialog)
      (LP: #447006)
    - allow access to acroread (LP: #473268)
    - allow access to eog (LP: #464016)
    - allow access to transmission (LP: #476299)
    - deny noisy write attempts to deny /usr/lib/xulrunner-*/components/*.tmp
      as seen with 'firefox --help')
    - deny noisy read to /.suspended (when navigating directories)
    - allow access to /usr/bin/liferea-add-feed (LP: #488851)
    - allow access to azureus (LP: #482677)
    - don't require 'owner' for /media (LP: #479580)
    - adjust AppArmor profile binary globbing to match other branches
    - allow ixr access to sed (for first runs)

  [ Alexander Sack <email address hidden> ]
  * bump lower bound for system sqlite3 to >= 3.6.16.1
    - update debian/rules
 -- Alexander Sack <email address hidden> Wed, 16 Dec 2009 00:43:08 +0100