firefox apparmor profile should include p11-kit

Bug #918973 reported by Jamie Strandboge
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Fix Released
Low
Jamie Strandboge

Bug Description

Some plugins want access to p11-kit:
[373960.595709] type=1400 audit(1327015233.138:1970): apparmor="DENIED" operation="open" parent=2254 profile="/usr/lib/firefox-10.0/firefox{,*[^s][^h]}" name="/etc/pkcs11/modules/gnome-keyring-module" pid=18889 comm="plugin-containe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

The p11-kit abstraction should either be added to firefox or an Ubuntu abstraction.

Tags: apparmor

Related branches

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Committed to firefox/beta branch and will be included in the next firefox upload to 12.04.

Changed in firefox (Ubuntu):
status: Triaged → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package firefox - 11.0~b4+build1-0ubuntu1

---------------
firefox (11.0~b4+build1-0ubuntu1) precise; urgency=low

  * New upstream release from the beta channel (FIREFOX_11_0b4_BUILD1)

  * Update globalmenu-extension to 2.0.4
    - Add support for Firefox 12
    - Ensure we correctly hide dummy menu items
  * Fix LP: #915895 - Just set autoDisableScopes to 0. Other distributions
    are already doing this, and we already made this feature pretty much
    useless by allowing extensions in the application directory, so that our
    language packs aren't disabled by default
    - update debian/vendor.js
  * Fix LP: #926495 - Add patch based on one from bmo: #691898 to enable
    building on ppc again
    - add debian/patches/fix-build-failure-without-yarr-jit.patch
    - update debian/patches/series
  * Fix LP: #939657 - Don't call g_settings_new each time we create a HTTP
    channel. Doing this causes a dbus roundtrip, and results in us spamming
    the session bus unnecessarily
    - add debian/patches/avoid-dbus-roundtrip-for-httpchannel.patch
    - update debian/patches/series
  * Fix LP: #894166 - Make Firefox work with our system hyphenation patterns,
    and stop including our own
    - update debian/vendor.js
    - add debian/patches/dont-include-hyphenation-patterns.patch
    - update debian/patches/series

  [ Jamie Strandboge <email address hidden> ]
  * debian/usr.bin.firefox.apparmor.12.04: include p11-kit abstraction (only
    needed on 12.04). LP: #918973
 -- Chris Coulson <email address hidden> Fri, 24 Feb 2012 14:55:30 +0000

Changed in firefox (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.