Apparmor stops applications from using GetArtistArt from the thumbnailer

Bug #1381102 reported by Andrew Hayzen on 2014-10-14
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor-easyprof-ubuntu (Ubuntu)
High
Jamie Strandboge

Bug Description

While attempting to make the music-app run under confinement we noticed that any Artist cover art is not shown from the thumbnailer.

This is the denial from the syslog:
Oct 14 01:29:14 ubuntu-phablet dbus[1654]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/com/canonical/Thumbnailer" interface="com.canonical.Thumbnailer" member="GetArtistArt" mask="send" name="com.canonical.Thumbnailer" pid=26358 profile="com.ubuntu.music_music_1.3.657" peer_pid=3667 peer_profile="unconfined"

Also it has been noted that in the file /var/lib/apparmor/profiles/click_com.ubuntu.music_music_1.3.657, GetAlbumArt exists but there is nothing for GetArtistArt.

  # Allow communications with thumbnailer for retrieving album art
  dbus (send)
       bus=session
       interface="org.freedesktop.DBus.Introspectable"
       path="/com/canonical/Thumbnailer"
       member="Introspect",
  dbus (send)
       bus=session
       path="/com/canonical/Thumbnailer"
       member=GetAlbumArt,

Jamie Strandboge (jdstrand) wrote :

This is needed so that the music-app can run under confinement.

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Jamie Strandboge (jdstrand)
tags: added: ota-1
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.37

---------------
apparmor-easyprof-ubuntu (1.2.37) utopic; urgency=medium

  * ubuntu/audio: also allow access to GetArtistArt when accessing the
    thumbnailer (LP: #1381102)
 -- Jamie Strandboge <email address hidden> Tue, 14 Oct 2014 09:37:24 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers