Ubuntu
apparmor package

  1. Bug #1861408
  2. Comment #3

Comment 3 for bug 1861408

Revision history for this message
dinar qurbanov (qdinar) wrote :

i modified /etc/apparmor.d/abstractions/fonts by adding w to
owner @{HOME}/.{,cache/}fontconfig/ r,
and replaced ff apparmor profile with "sudo apparmor_parser -r -T -W /etc/apparmor.d/usr.bin.firefox".
then i tried to open a page, and i got these:

Feb 3 21:26:26 dinar-Lenovo-G580 kernel: [14092.695137] audit: type=1400 audit(1580754386.268:292): apparmor="DENIED" operation="mknod" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/home/dinar/.cache/fontconfig/CACHEDIR.TAG.TMP-ZjyBns" pid=8547 comm=57656220436F6E74656E74 requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

Feb 3 21:26:26 dinar-Lenovo-G580 kernel: [14092.695143] audit: type=1400 audit(1580754386.268:293): apparmor="DENIED" operation="mknod" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/home/dinar/.cache/fontconfig/a41116dafaf8b233ac2c61cb73f2ea5f-le64.cache-7.TMP-6nwuBp" pid=8547 comm=57656220436F6E74656E74 requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000