Apparmor stops applications from using GetArtistArt from the thumbnailer

Bug #1381102 reported by Andrew Hayzen
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor-easyprof-ubuntu (Ubuntu)
Fix Released
High
Jamie Strandboge

Bug Description

While attempting to make the music-app run under confinement we noticed that any Artist cover art is not shown from the thumbnailer.

This is the denial from the syslog:
Oct 14 01:29:14 ubuntu-phablet dbus[1654]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/com/canonical/Thumbnailer" interface="com.canonical.Thumbnailer" member="GetArtistArt" mask="send" name="com.canonical.Thumbnailer" pid=26358 profile="com.ubuntu.music_music_1.3.657" peer_pid=3667 peer_profile="unconfined"

Also it has been noted that in the file /var/lib/apparmor/profiles/click_com.ubuntu.music_music_1.3.657, GetAlbumArt exists but there is nothing for GetArtistArt.

  # Allow communications with thumbnailer for retrieving album art
  dbus (send)
       bus=session
       interface="org.freedesktop.DBus.Introspectable"
       path="/com/canonical/Thumbnailer"
       member="Introspect",
  dbus (send)
       bus=session
       path="/com/canonical/Thumbnailer"
       member=GetAlbumArt,

Tags: ota-1
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This is needed so that the music-app can run under confinement.

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: New → In Progress
importance: Undecided → High
assignee: nobody → Jamie Strandboge (jdstrand)
tags: added: ota-1
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.37

---------------
apparmor-easyprof-ubuntu (1.2.37) utopic; urgency=medium

  * ubuntu/audio: also allow access to GetArtistArt when accessing the
    thumbnailer (LP: #1381102)
 -- Jamie Strandboge <email address hidden> Tue, 14 Oct 2014 09:37:24 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.