scopes denial against /android/system/build.prop

Bug #1378838 reported by Jamie Strandboge on 2014-10-08
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor-easyprof-ubuntu (Ubuntu)
Jamie Strandboge

Bug Description

Saw the following denial when reviewing a syslog paste:
apparmor="DENIED" operation="open" profile="<profile>" name="/android/system/build.prop" pid=NNN comm="scoperunner" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

We already have this rule:
  /system/build.prop r,

Seems like it should be changed to:
  /{,android/}system/build.prop r,

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: In Progress → Fix Committed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.36

apparmor-easyprof-ubuntu (1.2.36) utopic; urgency=medium

  * ubuntu/accounts: allow all on org.freedesktop.DBus.Properties for
    /com/google/code/AccountsSSO/SingleSignOn/** (LP: #1378809)
  * ubuntu/ubuntu-*, pending/ubuntu-scope-local-content, ubuntu/webview: also
    allow read on /android/system/build.prop (LP: #1378838)
 -- Jamie Strandboge <email address hidden> Wed, 08 Oct 2014 08:28:17 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers