Apparmor blocks Firefox to access ScreenSaver/SessionManager
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
taken from syslog:
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: firefox 51.0.1+
ProcVersionSign
Uname: Linux 4.4.0-59-generic x86_64
AddonCompatChec
ApportVersion: 2.20.1-0ubuntu2.5
Architecture: amd64
AudioDevicesInUse:
USER PID ACCESS COMMAND
/dev/snd/pcmC0D0c: thomas 3175 F...m pulseaudio
/dev/snd/pcmC0D0p: thomas 3175 F...m pulseaudio
/dev/snd/
BuildID: 20170125172221
Channel: Unavailable
CurrentDesktop: GNOME-Flashback
Date: Mon Jan 30 10:26:35 2017
Extensions: extensions.sqlite corrupt or missing
ForcedLayersAccel: False
IfupdownConfig:
# interfaces(5) file used by ifup(8) and ifdown(8)
auto lo
iface lo inet loopback
IncompatibleExt
InstallationDate: Installed on 2014-11-29 (793 days ago)
InstallationMedia: Ubuntu 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.2)
IpRoute:
default via 192.168.178.1 dev wlan0 proto static metric 600
169.254.0.0/16 dev docker0 scope link metric 1000 linkdown
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown
192.168.178.0/24 dev wlan0 proto kernel scope link src 192.168.178.22 metric 600
Locales: extensions.sqlite corrupt or missing
PrefSources: prefs.js
Profiles: Profile0 (Default) - LastVersion=
RunningIncompat
SourcePackage: firefox
Themes: extensions.sqlite corrupt or missing
UpgradeStatus: Upgraded to xenial on 2016-06-15 (228 days ago)
dmi.bios.date: 12/06/2013
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A16
dmi.board.name: 023HKR
dmi.board.vendor: Dell Inc.
dmi.board.version: A00
dmi.chassis.type: 9
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.
dmi.product.name: Latitude E5510
dmi.product.
dmi.sys.vendor: Dell Inc.
There's more:
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation= "dbus_method_ call" bus="session" path="/ScreenSaver" interface= "org.freedeskto p.ScreenSaver" member="Inhibit" mask="send" name="org. freedesktop. ScreenSaver" pid=12831 label=" /usr/lib/ firefox/ firefox{ ,*[^s][ ^h]}" peer_pid=3136 peer_label= "unconfined" "dbus_method_ call" bus="session" path="/ org/gnome/ SessionManager" interface= "org.gnome. SessionManager" member="Inhibit" mask="send" name="org. gnome.SessionMa nager" pid=12831 label=" /usr/lib/ firefox/ firefox{ ,*[^s][ ^h]}" peer_pid=3140 peer_label= "unconfined" "dbus_method_ call" bus="session" path="/ScreenSaver" interface= "org.freedeskto p.ScreenSaver" member="Inhibit" mask="send" name="org. freedesktop. ScreenSaver" pid=12875 label=" /usr/lib/ firefox/ firefox{ ,*[^s][ ^h]}" peer_pid=3136 peer_label= "unconfined" "dbus_method_ call" bus="session" path="/ org/gnome/ SessionManager" interface= "org.gnome. SessionManager" member="Inhibit" mask="send" name="org. gnome.SessionMa nager" pid=12875 label=" /usr/lib/ firefox/ firefox{ ,*[^s][ ^h]}" peer_pid=3140 peer_label= "unconfined"
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
Jan 30 10:25:47 lat61 dbus[3005]: apparmor="DENIED" operation=
Jan 30 10:31:55 lat61 kernel: [213373.518092] audit: type=1107 audit(148576871 5.928:46506) : pid=936 uid=102 auid=4294967295 ses=4294967295 msg='apparmor= "DENIED" operation= "dbus_method_ call" bus="system" path="/ org/freedesktop /UPower" interface= "org.freedeskto p.UPower" member= "EnumerateDevic es" mask="send" name="org. freedesktop. UPower" pid=14906 label=" /usr/lib/ firefox/ firefox{ ,*[^s][ ^h]}" peer_pid=2278 peer_label= "unconfined"
Jan 30 10:39:08 lat61 kernel: [213806.568888] audit: type=1107 audit(148576914 8.972:46581) : pid=936 uid=102 auid=4294967295 ses=4294967295 msg='apparmor= "DENIED" operation= "dbus_method_ call" bus="system" path="/ org/freedesktop /UPower/ devices/ battery_ BAT0" interface= "org.freedeskto p.DBus. Properties" member="GetAll" mask="send" name="org. freedesktop. UPower" pid=16669 label=" /usr/lib/ firefox/ firefox{ ,*[^s][ ^h]}" peer_pid=2278 peer_label= "unconfined"
All 4 syslog entries are triggered by playing the following 1080p video with FF 51.0.1:
https:/ /www.youtube. com/watch? v=ESFI6gPz- jU