apparmor="DENIED" when launching tp-butterfly

[Laurent Bigonville]

When starting telepathy-butterfly I get these in dmesg

[ 4977.468055] type=1400 audit(1311701823.786:46): apparmor="DENIED" operation="open" parent=6311 profile="/usr/lib/telepathy/telepathy-*" name="/proc/6694/mounts" pid=6694 comm="telepathy-butte" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[ 4977.469616] type=1400 audit(1311701823.786:47): apparmor="DENIED" operation="exec" parent=6695 profile="/usr/lib/telepathy/telepathy-*" name="/sbin/ldconfig" pid=6696 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 4977.472115] type=1400 audit(1311701823.786:48): apparmor="DENIED" operation="exec" parent=6697 profile="/usr/lib/telepathy/telepathy-*" name="/usr/bin/gcc-4.6" pid=6698 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 4977.474009] type=1400 audit(1311701823.796:49): apparmor="DENIED" operation="exec" parent=6699 profile="/usr/lib/telepathy/telepathy-*" name="/sbin/ldconfig" pid=6700 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 4977.476162] type=1400 audit(1311701823.796:50): apparmor="DENIED" operation="exec" parent=6701 profile="/usr/lib/telepathy/telepathy-*" name="/usr/bin/gcc-4.6" pid=6702 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

mission-control 1:5.9.0-1ubuntu2

[Jamie Strandboge (jdstrand)]

What service are you connecting to? How are you starting telepathy-butterfly? It seems rather odd that telepathy-butterfly would need access to the C compiler.

[Laurent Bigonville (bigon)]

Starting tp-butterfly from the command line, but the same happend when started through empathy.

telepathy-butterly is written in python BTW

[Jamie Strandboge (jdstrand)]

Thanks (I know about the python bit, but the profile is denying access to "/usr/bin/gcc-4.6"). Does telepathy-butterfly otherwise work normally with these denials?

[Jamie Strandboge (jdstrand)]

Actually, instead try adding the following to /etc/apparmor.d/usr.lib.telepathy (to the '/usr/lib/telepathy/telepathy-* {' stanza):
    deny @{PROC}/[0-9]*/mounts r,
    deny /sbin/ldconfig x,
    deny /usr/bin/gcc-4.6 x,

Then run:
$ sudo apparmor_parser -r /etc/apparmor.d/usr.lib.telepathy

Then test your telepathy-butterfly connections and report back. If they are not working, please look for more apparmor denials. I'm thinking this just spurious noise as telepathy-butterfly doesn't have the DAC permissions to use /sbin/ldconfig, etc.

[Jamie Strandboge (jdstrand)]

I added those to the profile and am able to login successfully to MSN with the adjusted profile. I am going to upload. Please file a new bug if you have any problems, thanks.

[Launchpad Janitor (janitor)]

This bug was fixed in the package telepathy-mission-control-5 - 1:5.9.0-1ubuntu3

---------------
telepathy-mission-control-5 (1:5.9.0-1ubuntu3) oneiric; urgency=low

  * debian/apparmor-profile: silence some noisy denials from
    telepathy-butterfly, but allow ix to /bin/uname (LP: #816554)
 -- Jamie Strandboge <email address hidden> Tue, 26 Jul 2011 15:02:14 -0500

[Laurent Bigonville (bigon)]

Is this common for python application?

I tried quickly yesterday evening and telepathy-butterfly was working normaly