apparmor blocks recently used files (in firefox)

[Thomas Mayer]

Taken from syslog:

Jan 30 12:55:35 lat61 gnome-session[3140]: (firefox:4627): Gtk-WARNING **: Attempting to read the recently used resources file at '/home/thomas/.local/share/recently-used.xbel', but the parser failed: Datei »/home/thomas/.local/share/recently-used.xbel« konnte nicht geöffnet werden: Keine Berechtigung.

It says 'no permission' whereas I can perfectly read it with the same system user:

wc -l recently-used.xbel
4 recently-used.xbel

That said, I assume it's apparmor related, similar to https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1377140

... just that the path changed AGAIN.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: apparmor 2.10.95-0ubuntu2.5
ProcVersionSignature: Ubuntu 4.4.0-59.80-generic 4.4.35
Uname: Linux 4.4.0-59-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.5
Architecture: amd64
CurrentDesktop: GNOME-Flashback:Unity
Date: Mon Jan 30 13:01:07 2017
InstallationDate: Installed on 2014-11-29 (793 days ago)
InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
ProcKernelCmdline: BOOT_IMAGE=/@/boot/vmlinuz-4.4.0-59-generic root=UUID=6408c2d9-1b60-43d7-9a7f-2dceeb40de28 ro rootflags=subvol=@ quiet splash vt.handoff=7
SourcePackage: apparmor
UpgradeStatus: Upgraded to xenial on 2016-06-15 (228 days ago)

[Thomas Mayer (thomas303)]

FF's apparmor profile shipped with 51.0.1 contains a line

deny @{HOME}/.local/share/recently-used.xbel r,

which leads to this issue.

I removed the line in a patch named "VERSION 6" provided at https://bugs.launchpad.net/bugs/1659988

That said, this issue
- is 100% related to the firefox package (which contains that profile
- not related to apparmor itself

[Seth Arnold (seth-arnold)]

Thomas, your logs are filled with what looks like errors from the ubuntu-sso-client package. Could you please file a bug against that package too? ubuntu-bug ubuntu-sso-client should do the job.

Thanks

[Thomas Mayer (thomas303)]

@seth-arnold bug report for ubuntu-sso-client: https://bugs.launchpad.net/bugs/1660508

This is off-topic in terms of (this) issue 1660314.

[Tim Ritberg (xpert-reactos)]

This bug is annoying, Firefox should not read this file anyway.