Firefox apparmor profile does not allow access to /opt

Bug #728485 reported by Kevin Partin on 2011-03-03
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Low
Jamie Strandboge

Bug Description

Binary package hint: firefox

I use several commercial software packages that install in /opt. The default apparmor profile for firefox, /etc/apparmor.d/usr.bin.firefox does not allow the user documentation that is installed in /opt to be read by firefox. Everytime that firefox gets updated, I have to manually patch the firefox apparmor profile to allow users to read the user documentation.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: firefox 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
ProcVersionSignature: Ubuntu 2.6.32-29.58-generic-pae 2.6.32.28+drm33.13
Uname: Linux 2.6.32-29-generic-pae i686
NonfreeKernelModules: nvidia
Architecture: i386
Date: Thu Mar 3 08:51:15 2011
FirefoxPackages:
 firefox 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
 firefox-gnome-support 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
 firefox-branding 3.6.14+build3+nobinonly-0ubuntu0.10.04.1
 abroswer N/A
 abrowser-branding N/A
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.utf8
 SHELL=/bin/bash
SourcePackage: firefox

Kevin Partin (kevin-s-partin) wrote :
Micah Gersten (micahg) on 2011-04-10
tags: added: apparmor
Jamie Strandboge (jdstrand) wrote :

Thank you for using Ubuntu and reporting a bug. This is committed to firefox-next and firefox-trunk.

Changed in firefox (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
status: New → Fix Committed
Changed in firefox (Ubuntu):
importance: Undecided → Low
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package firefox - 11.0~b6+build1-0ubuntu1

---------------
firefox (11.0~b6+build1-0ubuntu1) precise; urgency=low

  * New upstream release from the beta channel (FIREFOX_11_0b6_BUILD1)

  [ Jamie Strandboge <email address hidden> ]
  * debian/usr.bin.firefox.apparmor.*:
    - allow access to statm and smaps for about:memory (LP: #911494)
    - allow read access to files in /opt (LP: #728485)

  [ Chris Coulson <email address hidden> ]
  * Update debian/patches/fix-build-failure-without-yarr-jit.patch
  * Fix LP: #926495 - Disable the SPS profiler on unsupported architectures
    - add debian/patches/no-sps-profiler-on-unsupported-archs.patch
    - update debian/patches/series
 -- Chris Coulson <email address hidden> Thu, 08 Mar 2012 16:15:52 +0000

Changed in firefox (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers