2010-09-27 13:38:16 |
Jamie Strandboge |
bug |
|
|
added bug |
2010-09-27 13:38:38 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Lucid |
|
2010-09-27 13:38:38 |
Jamie Strandboge |
bug task added |
|
apparmor (Ubuntu Lucid) |
|
2010-09-27 13:38:38 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Maverick |
|
2010-09-27 13:38:38 |
Jamie Strandboge |
bug task added |
|
apparmor (Ubuntu Maverick) |
|
2010-09-27 13:39:11 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): status |
New |
Triaged |
|
2010-09-27 13:39:12 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): importance |
Undecided |
Medium |
|
2010-09-27 13:39:14 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): assignee |
|
Jamie Strandboge (jdstrand) |
|
2010-09-27 13:39:17 |
Jamie Strandboge |
apparmor (Ubuntu Maverick): status |
New |
Triaged |
|
2010-09-27 13:39:19 |
Jamie Strandboge |
apparmor (Ubuntu Maverick): importance |
Undecided |
Medium |
|
2010-09-27 13:39:22 |
Jamie Strandboge |
apparmor (Ubuntu Maverick): assignee |
|
Jamie Strandboge (jdstrand) |
|
2010-09-27 13:40:51 |
Jamie Strandboge |
summary |
mailto broken for thunderbird |
mailto from evince broken for thunderbird |
|
2010-09-27 13:50:30 |
Jamie Strandboge |
apparmor (Ubuntu Maverick): milestone |
|
ubuntu-10.10 |
|
2010-09-27 13:55:13 |
Jamie Strandboge |
description |
Binary package hint: apparmor
Recent thunderbird uploads changed the method in which thunderbird is invoked on the system, which breaks mailto links from Evince.
On lucid (via kern.log):
[ 112.195049] type=1503 audit(1285594428.701:15): operation="exec" pid=1504 parent=1 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/lib/thunderbird-3.0.8/thunderbird.sh"
On maverick (via audit.log):
type=SYSCALL msg=audit(1285594199.369:24): arch=c000003e syscall=59 success=no exit=-13 a0=7fb8602dc93f a1=7fb860333d70 a2=7fffaea38c40 a3=7fffaea377d0 items=0 ppid=1 pid=5511 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=4294967295 comm="evince" exe="/usr/bin/evince" key=(null) |
Binary package hint: apparmor
Recent thunderbird uploads changed the method in which thunderbird is invoked on the system, which breaks mailto links from Evince.
On lucid (via kern.log):
[ 112.195049] type=1503 audit(1285594428.701:15): operation="exec" pid=1504 parent=1 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/lib/thunderbird-3.0.8/thunderbird.sh"
On maverick (via audit.log):
type=AVC msg=audit(1285595037.768:31): apparmor="DENIED" operation="exec" parent=6519 profile="/usr/bin/evince" name="/usr/lib/thunderbird-3.1.4/thunderbird.sh" pid=6520 comm="evince" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
|
|
2010-09-27 14:07:48 |
Jamie Strandboge |
apparmor (Ubuntu Maverick): status |
Triaged |
In Progress |
|
2010-09-27 14:07:51 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): status |
Triaged |
In Progress |
|
2010-09-27 14:08:11 |
Jamie Strandboge |
apparmor (Ubuntu Lucid): milestone |
|
lucid-updates |
|
2010-09-27 14:11:17 |
Jamie Strandboge |
apparmor (Ubuntu Maverick): status |
In Progress |
Fix Committed |
|
2010-09-27 15:04:58 |
Launchpad Janitor |
apparmor (Ubuntu Maverick): status |
Fix Committed |
Fix Released |
|
2010-09-27 15:30:15 |
Jamie Strandboge |
attachment added |
|
apparmor_2.5-0ubuntu3.1.debdiff https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/648900/+attachment/1644381/+files/apparmor_2.5-0ubuntu3.1.debdiff |
|
2010-09-27 15:30:36 |
Jamie Strandboge |
attachment added |
|
test_hyperlink.pdf https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/648900/+attachment/1644382/+files/test_hyperlink.pdf |
|
2010-09-27 15:35:36 |
Jamie Strandboge |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2010-09-28 15:15:31 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/apparmor |
|
2010-11-03 16:33:43 |
Jamie Strandboge |
description |
Binary package hint: apparmor
Recent thunderbird uploads changed the method in which thunderbird is invoked on the system, which breaks mailto links from Evince.
On lucid (via kern.log):
[ 112.195049] type=1503 audit(1285594428.701:15): operation="exec" pid=1504 parent=1 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/lib/thunderbird-3.0.8/thunderbird.sh"
On maverick (via audit.log):
type=AVC msg=audit(1285595037.768:31): apparmor="DENIED" operation="exec" parent=6519 profile="/usr/bin/evince" name="/usr/lib/thunderbird-3.1.4/thunderbird.sh" pid=6520 comm="evince" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
|
SRU Justification
1. impact of the bug is low for stable releases, but the fix is non-intrusive. It is included here as part of the 2.5.1 update for Lucid (LP: #660077)
2. This has been addressed during the maverick development cycle.
3. Patch adjusts the path for thunderbird in abstractions/ubuntu-email
4. TEST CASE:
* $ sudo apt-get install thunderbird
* Configure thunderbird as the preferred mail reader in System/Preferences/Preferred Applications
* open the attached PDF in evince and click on the mailto link
5. The regression potential is very low for this patch as it only adds additional access to launch thunderbird.
Binary package hint: apparmor
Recent thunderbird uploads changed the method in which thunderbird is invoked on the system, which breaks mailto links from Evince.
On lucid (via kern.log):
[ 112.195049] type=1503 audit(1285594428.701:15): operation="exec" pid=1504 parent=1 profile="/usr/bin/evince" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/lib/thunderbird-3.0.8/thunderbird.sh"
On maverick (via audit.log):
type=AVC msg=audit(1285595037.768:31): apparmor="DENIED" operation="exec" parent=6519 profile="/usr/bin/evince" name="/usr/lib/thunderbird-3.1.4/thunderbird.sh" pid=6520 comm="evince" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
|
|
2010-11-03 16:34:03 |
Jamie Strandboge |
bug |
|
|
added subscriber SRU Verification |
2010-12-03 17:22:24 |
Martin Pitt |
apparmor (Ubuntu Lucid): status |
In Progress |
Fix Committed |
|
2010-12-03 17:22:30 |
Martin Pitt |
tags |
|
verification-needed |
|
2010-12-14 20:47:18 |
Martin Pitt |
tags |
verification-needed |
verification-done |
|
2010-12-15 11:50:58 |
Launchpad Janitor |
apparmor (Ubuntu Lucid): status |
Fix Committed |
Fix Released |
|
2011-09-19 21:31:02 |
Ubuntu Foundations Team Bug Bot |
tags |
verification-done |
testcase verification-done |
|