Firefox apparmor profile : should allow python3.10 and further

Bug #1989571 reported by gerbier
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

I'm using firefox package from https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu/ on ubuntu 22.04. In this release, python3 version is currently 3.10.4-0ubuntu2.
But the profile only allow python3.0 to python3.9, and I have errors notifications

the profile :
grep python /etc/apparmor.d/usr.bin.firefox
#include <abstractions/python>
    /usr/include/python2.[4567]/pyconfig.h r,
    /usr/local/lib/python3.[0-9]/dist-packages/ r,
    /usr/bin/python3.[0-9] mr,

so I suggest the following patch (also attached) :
--- usr.bin.firefox 2022-09-14 11:48:12.612062823 +0200
+++ usr.bin.firefox.new 2022-09-14 11:48:58.232329229 +0200
@@ -319,9 +319,9 @@
     /usr/share/distro-info/*.csv r,
     /var/lib/dpkg/** r,

- /usr/local/lib/python3.[0-9]/dist-packages/ r,
+ /usr/local/lib/python3.[0-9]*/dist-packages/ r,
     /usr/bin/ r,
- /usr/bin/python3.[0-9] mr,
+ /usr/bin/python3.[0-9]* mr,

     # file_inherit
     deny /tmp/gtalkplugin.log w,

Revision history for this message
gerbier (eric-gerbier) wrote :
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in firefox (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.