apparmor profile blocks Sun Java plugin
Bug #570128 reported by
Matthias Andree
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox (Ubuntu) |
Fix Released
|
Low
|
Jamie Strandboge | ||
Karmic |
Won't Fix
|
Low
|
Jamie Strandboge | ||
Lucid |
Fix Released
|
Low
|
Jamie Strandboge | ||
Maverick |
Fix Released
|
Low
|
Jamie Strandboge | ||
firefox-3.5 (Ubuntu) |
Invalid
|
Low
|
Unassigned | ||
Karmic |
Fix Released
|
Low
|
Jamie Strandboge | ||
Lucid |
Invalid
|
Low
|
Unassigned | ||
Maverick |
Invalid
|
Low
|
Unassigned |
Bug Description
Binary package hint: firefox-3.5
The AppArmor profile shipping with firefox-
This may be a recent regression, but I cannot verify that.
Tested patch attached.
ProblemType: Bug
Architecture: i386
Date: Mon Apr 26 13:51:34 2010
DistroRelease: Ubuntu 9.10
Package: firefox-3.5 3.5.9+nobinonly
ProcEnviron:
LANGUAGE=
PATH=(custom, no user)
LANG=de_DE.UTF-8
SHELL=/bin/bash
ProcVersionSign
SourcePackage: firefox-3.5
Uname: Linux 2.6.31-20-generic i686
tags: | added: patch |
tags: | added: apparmor |
Changed in firefox-3.5 (Ubuntu Lucid): | |
status: | New → Triaged |
Changed in firefox-3.5 (Ubuntu Karmic): | |
status: | New → Triaged |
Changed in firefox-3.5 (Ubuntu Maverick): | |
status: | Triaged → Invalid |
Changed in firefox (Ubuntu Lucid): | |
status: | New → Triaged |
importance: | Undecided → Low |
Changed in firefox (Ubuntu Karmic): | |
status: | New → Triaged |
importance: | Undecided → Low |
Changed in firefox-3.5 (Ubuntu Maverick): | |
importance: | Medium → Low |
Changed in firefox (Ubuntu Maverick): | |
status: | New → Fix Committed |
importance: | Undecided → Low |
assignee: | nobody → Jamie Strandboge (jdstrand) |
Changed in firefox-3.5 (Ubuntu Lucid): | |
importance: | Undecided → Low |
Changed in firefox-3.5 (Ubuntu Karmic): | |
importance: | Undecided → Low |
Changed in firefox-3.5 (Ubuntu Lucid): | |
status: | Triaged → Invalid |
Changed in firefox (Ubuntu Lucid): | |
status: | Triaged → Fix Committed |
assignee: | nobody → Jamie Strandboge (jdstrand) |
Changed in firefox (Ubuntu Karmic): | |
status: | Triaged → Fix Committed |
assignee: | nobody → Jamie Strandboge (jdstrand) |
Changed in firefox-3.5 (Ubuntu Karmic): | |
status: | Triaged → Fix Committed |
assignee: | nobody → Jamie Strandboge (jdstrand) |
Changed in firefox (Ubuntu Karmic): | |
status: | Fix Committed → Won't Fix |
To post a comment you must log in.
Relevant kernel logging and aa-status output:
Apr 26 13:05:27 rho kernel: [81864.337459] type=1503 audit(127227992 7.968:163) : operation="exec" pid=4087 parent=3887 profile= "/usr/lib/ firefox- 3.5.*/firefox" requested_ mask=": :x" denied_mask="::x" fsuid=504 ouid=0 name="/ usr/lib/ jvm/java- 6-sun-1. 6.0.16/ jre/bin/ java_vm" 7.984:164) : operation="exec" pid=4088 parent=3887 profile= "/usr/lib/ firefox- 3.5.*/firefox" requested_ mask=": :x" denied_mask="::x" fsuid=504 ouid=0 name="/ usr/lib/ jvm/java- 6-sun-1. 6.0.16/ jre/bin/ java_vm" 7.996:165) : operation="exec" pid=4089 parent=3887 profile= "/usr/lib/ firefox- 3.5.*/firefox" requested_ mask=": :x" denied_mask="::x" fsuid=504 ouid=0 name="/ usr/lib/ jvm/java- 6-sun-1. 6.0.16/ jre/bin/ java_vm"
Apr 26 13:05:27 rho kernel: [81864.353749] type=1503 audit(127227992
Apr 26 13:05:28 rho kernel: [81864.367511] type=1503 audit(127227992
$ sudo aa-status share/gdm/ guest-session/ Xsession lib/firefox- 3.5.*/firefox bin/evince- thumbnailer
apparmor module is loaded.
17 profiles are loaded.
13 profiles are in enforce mode.
/usr/
/usr/
/usr/
[...]