Firefox apparmor profile does not allow access to /opt

Bug #728485 reported by Kevin Partin
This bug affects 1 person
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Fix Released
Jamie Strandboge

Bug Description

Binary package hint: firefox

I use several commercial software packages that install in /opt. The default apparmor profile for firefox, /etc/apparmor.d/usr.bin.firefox does not allow the user documentation that is installed in /opt to be read by firefox. Everytime that firefox gets updated, I have to manually patch the firefox apparmor profile to allow users to read the user documentation.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: firefox 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
ProcVersionSignature: Ubuntu 2.6.32-29.58-generic-pae
Uname: Linux 2.6.32-29-generic-pae i686
NonfreeKernelModules: nvidia
Architecture: i386
Date: Thu Mar 3 08:51:15 2011
 firefox 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
 firefox-gnome-support 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
 firefox-branding 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
 abroswer N/A
 abrowser-branding N/A
 PATH=(custom, user)
SourcePackage: firefox

Revision history for this message
Kevin Partin (kevin-s-partin) wrote :
Micah Gersten (micahg)
tags: added: apparmor
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thank you for using Ubuntu and reporting a bug. This is committed to firefox-next and firefox-trunk.

Changed in firefox (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
status: New → Fix Committed
Changed in firefox (Ubuntu):
importance: Undecided → Low
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package firefox - 11.0~b6+build1-0ubuntu1

firefox (11.0~b6+build1-0ubuntu1) precise; urgency=low

  * New upstream release from the beta channel (FIREFOX_11_0b6_BUILD1)

  [ Jamie Strandboge <email address hidden> ]
  * debian/usr.bin.firefox.apparmor.*:
    - allow access to statm and smaps for about:memory (LP: #911494)
    - allow read access to files in /opt (LP: #728485)

  [ Chris Coulson <email address hidden> ]
  * Update debian/patches/fix-build-failure-without-yarr-jit.patch
  * Fix LP: #926495 - Disable the SPS profiler on unsupported architectures
    - add debian/patches/no-sps-profiler-on-unsupported-archs.patch
    - update debian/patches/series
 -- Chris Coulson <email address hidden> Thu, 08 Mar 2012 16:15:52 +0000

Changed in firefox (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.