AppArmor removing Citrix Plugin from Firefox

Bug #975407 reported by BigcityCat
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Won't Fix
Undecided
Unassigned

Bug Description

I'm not sure if this is a bug or Apparmor just sucks. I installed Citrix reciever from here. https://www.citrix.com/English/ss/downloads/details.asp?downloadId=2316611&productId=1689163

It's have doen so several times and it works without a hitch. Until you enforce the generic Firefox profile. It then stops working and apparmor uninstalls the plugin without asking if you actually want it to uninstall it. Then I can never get the plugin reinstalled. Apparmor is blocking reinstall even after I purge apparmor from the system.

Revision history for this message
BigcityCat (pshomeexpress) wrote :

Bad spelling. Should have said I have installed citrix several times with no problems. I think the issue is the citrix plugin should be allowed in the default profile and Apparmor should not be allowed to remove any plugin without asking if that is what the user wants.

affects: launchpad → ubuntu
affects: ubuntu → apparmor (Ubuntu)
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for using Ubuntu and filing a bug. While I appreciate you are frustrated by this issue, lets try to keep the conversation constructive.

First, apparmor would not uninstall the plugin. It sounds like it is blocking it from working. Second, firefox ships the apparmor profile, so I have retargeted the bug to firefox. Rather than purging apparmor you should only have to:
$ sudo aa-disable /etc/apparmor.d/usr.bin.firefox

Then possibly restart all instances of firefox and it should be back.

The apparmor profile is opt-in and not enabled by default for precisely these types of plugins. It sounds like you need to update your policy, and I suggest you add the needed access rules to /etc/apparmor.d/local/usr.bin.firefox so upgrades won't remove them.

If you would like to attach your /var/log/kern.log file after seeing the problems, we might be able to incorporate some of the denials into our official apparmor policy for firefox.

affects: apparmor (Ubuntu) → firefox (Ubuntu)
Revision history for this message
Chris Coulson (chrisccoulson) wrote :

And *please* don't use the Launchpad interface for reporting Firefox bugs. Please always use Apport, which would have automatically attached the information that Jamie has asked for.

If other people hadn't commented on this already, I would have just closed it with a request that you resubmit with Apport :)

Revision history for this message
Bryan Quigley (bryanquigley) wrote :

Plugins like this have been removed by Mozilla from Firefox since March 2017.
https://developer.mozilla.org/en-US/docs/Plugins/Roadmap

Changed in firefox (Ubuntu):
status: New → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.