flashplayer does not work due missing apparmor rule

[Jean-Louis Dupond]

I updated to Ubuntu 14.10 recently, and I noticed the flashplayer was broken.

After some debugging, I noticed there were alot of the following messages in syslog:
kernel: [56384.537469] audit: type=1400 audit(1411163225.434:2596): apparmor="DENIED" operation="open" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/etc/ssl/openssl.cnf" pid=10890 comm="plugin-containe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

Now I simply added the following to the apparmor rules:
/etc/ssl/openssl.cnf r,

And flash started to work perfectly after that.

Guess 99% of the firefox users have flashplayer installed, so I guess it might be good to have the rule added?

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[asgard2 (kamp000x)]

Flash is not working, same syslog apparmor message.

Firefox error messages:
2.4+ kernel w/o ELF notes? -- report this
Auto configuration failed
...:system library:fopen:Keine Berechtigung:bss_file.c:169:fopen('/usr/lib/ssl/openssl.cnf','rb')
...BIO routines:BIO_new_file:system lib:bss_file.c:174:
...configuration file routines:DEF_LOAD:system lib:conf_def.c:199:

###!!! [Parent][MessageChannel::InterruptCall] Error: Channel error: cannot send/recv

[Daniel Richard G. (skunk)]

The current Firefox AppArmor profile includes the "openssl" abstraction, which allows access to /etc/ssl/openssl.cnf. This bug should no longer be present in Ubuntu.