Confinement exception needed for unity8-dash

Bug #1589444 reported by Paweł Stołowski on 2016-06-06
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical System Image
High
David Barth
Online Accounts setup for Ubuntu Touch
High
Alberto Mardegan
signon-apparmor-extension
High
Alberto Mardegan
webapps-sprint
High
Alberto Mardegan

Bug Description

When running unity8-dash confined by an apparmor profile (this feature is still in testing, silo 65), OA requests made by the dash on behalf of scopes are all rejected with the following error in unity8-dash.log:

RequestAccess failed: QDBusError("com.ubuntu.OnlineAccountsUi.InvalidApplication", "Invalid client application")

Here is the output of online-accounts-service in debug mode when it happens:

phablet@ubuntu-phablet:~$ OAU_LOGGING_LEVEL=2 OAU_DAEMON_TIMEOUT=9999 online-accounts-service
service.cpp 42 requestAccess Got request: QMap(("application", QVariant(QString, "com.ubuntu.scopes.youtube_youtube") ) ( "pid" , QVariant(uint, 2977) ) ( "provider" , QVariant(QString, "google") ) ( "serviceType" , QVariant(QString, "sharing") ) ( "windowId" , QVariant(uint, 2977) ) )
utils.cpp 49 apparmorProfileOfPeer App ID: "unity8-dash"
request-manager.cpp 113 runQueue Head: OnlineAccountsUi::Request(0x158f7d8)
mir-helper.cpp 151 session_event_callback Prompt Session state updated to 1
Loading module: 'libubuntu_application_api_touch_mirclient.so.3.0.0'
/usr/bin/online-accounts-ui: unrecognized option '--socket'
/usr/bin/online-accounts-ui: unrecognized option '--profile'
ui-server.cpp 103 onDataReady QMap(("code", QVariant(QString, "process") ) ( "data" , QVariant(QVariantMap, QMap(("application", QVariant(QString, "com.ubuntu.scopes.youtube_youtube") ) ( "pid" , QVariant(uint, 2977) ) ( "provider" , QVariant(QString, "google") ) ( "serviceType" , QVariant(QString, "sharing") ) ( "windowId" , QVariant(uint, 2977) ) ) ) ) ( "id" , QVariant(int, 0) ) ( "interface" , QVariant(QString, "com.ubuntu.OnlineAccountsUi") ) ( "profile" , QVariant(QString, "unity8-dash") ) )
Given applicationId doesn't match profile
request.cpp 272 fail "com.ubuntu.OnlineAccountsUi.InvalidApplication" "Invalid client application"
ui-proxy.cpp 186 onDataReady QMap(("code", QVariant(QString, "failed") ) ( "errmsg" , QVariant(QString, "Invalid client application") ) ( "errname" , QVariant(QString, "com.ubuntu.OnlineAccountsUi.InvalidApplication") ) ( "id" , QVariant(int, 0) ) ( "interface" , QVariant(QString, "com.ubuntu.OnlineAccountsUi") ) )
ui-proxy.cpp 377 ~UiProxy
mir-helper.cpp 151 session_event_callback Prompt Session state updated to 0
ui-server.cpp 86 ~UiServerPrivate
QProcess: Destroyed while process ("/usr/bin/online-accounts-ui") is still running.

The apparmor profile for unity8-dash is here: https://code.launchpad.net/~stolowski/unity8/apparmor-profile/+merge/272602

Related branches

description: updated
Alberto Mardegan (mardy) on 2016-06-06
Changed in ubuntu-system-settings-online-accounts:
assignee: nobody → Alberto Mardegan (mardy)
importance: Undecided → High
status: New → In Progress
Changed in webapps-sprint:
status: New → In Progress
importance: Undecided → High
assignee: nobody → Alberto Mardegan (mardy)
milestone: none → sprint-23
Alberto Mardegan (mardy) on 2016-06-07
Changed in signon-apparmor-extension:
status: New → In Progress
importance: Undecided → High
assignee: nobody → Alberto Mardegan (mardy)
Changed in canonical-devices-system-image:
status: New → In Progress
importance: Undecided → High
milestone: none → 12
Changed in canonical-devices-system-image:
status: In Progress → Fix Committed
David Barth (dbarth) on 2016-06-21
Changed in ubuntu-system-settings-online-accounts:
status: In Progress → Fix Committed
Changed in signon-apparmor-extension:
status: In Progress → Fix Committed
Changed in webapps-sprint:
status: In Progress → Fix Released
Changed in canonical-devices-system-image:
assignee: nobody → David Barth (dbarth)
Changed in canonical-devices-system-image:
status: Fix Committed → Fix Released
Alberto Mardegan (mardy) on 2016-07-28
Changed in signon-apparmor-extension:
status: Fix Committed → Fix Released
Changed in ubuntu-system-settings-online-accounts:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers