Apparmor prevents the crash reporter from working
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox (Ubuntu) |
Expired
|
Undecided
|
Unassigned |
Bug Description
Recently Firefox crashed on me twice. Looking at "about:crashes" showed nothing but very old crash reports.
Looking at the audit.log I found that Apparmor is not allowing the crash report to use ptrace:
type=AVC msg=audit(
type=SYSCALL msg=audit(
type=AVC msg=audit(
type=SYSCALL msg=audit(
Those messages are not in the usual format as I run auditd but the actual content should be the same.
More information:
$ lsb_release -rd
Description: Ubuntu 14.04 LTS
Release: 14.04
$ apt-cache policy firefox apparmor linux-image-$(uname -r)
firefox:
Installed: 29.0+build1-
Candidate: 29.0+build1-
Version table:
*** 29.0+build1-
500 http://
500 http://
100 /var/lib/
28.
500 http://
apparmor:
Installed: 2.8.95~
Candidate: 2.8.95~
Version table:
*** 2.8.95~
500 http://
100 /var/lib/
linux-image-
Installed: 3.13.0-27.50
Candidate: 3.13.0-27.50
Version table:
*** 3.13.0-27.50 0
500 http://
100 /var/lib/
ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: firefox 29.0+build1-
ProcVersionSign
Uname: Linux 3.13.0-27-generic x86_64
AddonCompatChec
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/
/dev/snd/pcmC0D0p: simon 4895 F...m pulseaudio
BuildID: 20140428193813
Channel: Unavailable
CurrentDesktop: Unity
CurrentDmesg: dmesg: klogctl failed: Operation not permitted
Date: Fri May 23 15:50:44 2014
DefaultProfileI
Français Language Pack - <email address hidden>
Default - {972ce4c6-
DefaultProfileP
Google Talk Plugin - /opt/google/
Google Talk Plugin Video Renderer - /opt/google/
TLSAValidatorP
DNSSECValidato
Shockwave Flash - /usr/lib/
DefaultProfileP
prefs.js
[Profile]/<email address hidden>
[Profile]/<email address hidden>
ForcedLayersAccel: False
InstallationDate: Installed on 2014-01-26 (116 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Alpha amd64 (20140124)
Profile1Incompa
Profile1Plugins:
Google Talk Plugin - /opt/google/
Google Talk Plugin Video Renderer - /opt/google/
Shockwave Flash - /usr/lib/
Profile1PrefSou
prefs.js
[Profile]/<email address hidden>
Profile2Incompa
Profile2Plugins:
TLSAValidatorP
DNSSECValidato
Shockwave Flash - /usr/lib/
Google Talk Plugin - /opt/google/
Google Talk Plugin Video Renderer - /opt/google/
Profile2PrefSou
prefs.js
[Profile]/<email address hidden>
Profiles:
Profile0 (Default) - LastVersion=
Profile1 - LastVersion=
Profile2 - LastVersion=
RfKill:
0: phy0: Wireless LAN
Soft blocked: no
Hard blocked: no
RunningIncompat
SourcePackage: firefox
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 02/14/2013
dmi.bios.vendor: LENOVO
dmi.bios.version: 6IET85WW (1.45 )
dmi.board.name: 2516CTO
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.
dmi.modalias: dmi:bvnLENOVO:
dmi.product.name: 2516CTO
dmi.product.
dmi.sys.vendor: LENOVO
Related branches
Changed in firefox (Ubuntu): | |
status: | New → Confirmed |
Changed in firefox (Ubuntu): | |
assignee: | nobody → Quinn Balazs (qbalazs) |
status: | Confirmed → In Progress |
The ability to support ptrace rules was recently added to apparmor. It looks like we're trying to enforce ptrace rules that either aren't there, or that are improperly configured. The current behaviour of denying ptrace read masks leaves Firefox incapable of producing a crash dump, which leads to no crash reports being generated or submitted, which is a bit of a nuisance.