| 2010-05-09 17:52:12 |
lipstick |
bug |
|
|
added bug |
| 2010-05-09 17:52:12 |
lipstick |
attachment added |
|
Dependencies.txt http://launchpadlibrarian.net/48153992/Dependencies.txt |
|
| 2010-06-09 12:28:36 |
Marc Deslauriers |
affects |
chromium-browser (Ubuntu) |
gdm-guest-session (Ubuntu) |
|
| 2010-06-09 12:28:52 |
Marc Deslauriers |
tags |
apport-bug i386 lucid |
apparmor apport-bug i386 lucid |
|
| 2010-06-09 17:23:58 |
Marc Deslauriers |
gdm-guest-session (Ubuntu): status |
New |
Confirmed |
|
| 2010-06-09 17:24:05 |
Marc Deslauriers |
gdm-guest-session (Ubuntu): importance |
Undecided |
Low |
|
| 2010-07-25 23:46:07 |
Chris Williams |
bug task added |
|
openvz-kernel |
|
| 2010-07-25 23:49:20 |
Chris Williams |
bug |
|
|
added subscriber Chris Williams |
| 2010-07-30 12:24:13 |
John Baptist |
bug |
|
|
added subscriber John Baptist |
| 2010-08-20 13:48:31 |
Daniel Hahler |
bug watch added |
|
http://code.google.com/p/chromium/issues/detail?id=31077 |
|
| 2010-08-20 13:48:31 |
Daniel Hahler |
bug task added |
|
chromium-browser |
|
| 2010-08-20 13:53:17 |
Daniel Hahler |
bug |
|
|
added subscriber Daniel Hahler |
| 2010-08-20 13:53:23 |
Daniel Hahler |
openvz-kernel: status |
New |
Confirmed |
|
| 2010-08-20 13:56:02 |
Daniel Hahler |
summary |
chromium-browser can't open when the guest account is activated |
chromium-browser fails to start (guest account, OpenVZ): "Failed to move to new PID namespace: Operation not permitted" |
|
| 2010-11-08 21:59:09 |
Evan Martin (Chromium) |
bug watch added |
|
http://code.google.com/p/chromium/issues/detail?id=62248 |
|
| 2011-02-14 09:29:56 |
Carlo Marcelo Arenas Belon |
bug |
|
|
added subscriber Carlo Marcelo Arenas Belon |
| 2011-12-16 04:04:58 |
CPKS |
bug |
|
|
added subscriber CPKS |
| 2012-03-19 16:04:08 |
Colan Schwartz |
bug |
|
|
added subscriber Colan Schwartz |
| 2012-04-24 02:57:48 |
Colan Schwartz |
tags |
apparmor apport-bug i386 lucid |
amd64 apparmor apport-bug i386 lucid oneiric precise |
|
| 2012-05-13 01:35:14 |
Ugur Aslan |
bug |
|
|
added subscriber Ugur Aslan |
| 2012-08-27 21:16:10 |
jeremiejig |
attachment added |
|
attempt to fix the bug (not working) https://bugs.launchpad.net/ubuntu/+source/gdm-guest-session/+bug/577919/+attachment/3279672/+files/lightdm-guest-session |
|
| 2012-08-27 21:46:38 |
jeremiejig |
gdm-guest-session (Ubuntu): assignee |
|
jeremiejig (pauljiang) |
|
| 2012-08-27 22:20:39 |
jeremiejig |
attachment added |
|
apparmor profile for guest-session fixed for chromium launch https://bugs.launchpad.net/ubuntu/+source/gdm-guest-session/+bug/577919/+attachment/3279749/+files/lightdm-guest-session |
|
| 2012-08-27 22:22:52 |
jeremiejig |
gdm-guest-session (Ubuntu): assignee |
jeremiejig (pauljiang) |
|
|
| 2012-08-28 00:25:03 |
Ubuntu Foundations Team Bug Bot |
tags |
amd64 apparmor apport-bug i386 lucid oneiric precise |
amd64 apparmor apport-bug i386 lucid oneiric patch precise |
|
| 2012-08-28 00:25:14 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
| 2012-08-28 14:24:43 |
jeremiejig |
bug task added |
|
lightdm |
|
| 2012-08-28 14:28:49 |
Launchpad Janitor |
lightdm (Ubuntu): status |
New |
Confirmed |
|
| 2012-08-28 14:28:49 |
jeremiejig |
affects |
lightdm |
lightdm (Ubuntu) |
|
| 2012-08-28 14:39:21 |
jeremiejig |
lightdm (Ubuntu): status |
New |
Confirmed |
|
| 2012-08-28 16:10:43 |
jeremiejig |
lightdm (Ubuntu): status |
Confirmed |
In Progress |
|
| 2012-08-28 16:10:43 |
jeremiejig |
lightdm (Ubuntu): assignee |
|
jeremiejig (pauljiang) |
|
| 2012-08-28 16:11:31 |
jeremiejig |
affects |
lightdm (Ubuntu) |
lightdm |
|
| 2012-08-28 22:02:44 |
jeremiejig |
attachment added |
|
fix the bug in a more clean way https://bugs.launchpad.net/ubuntu/+source/gdm-guest-session/+bug/577919/+attachment/3281213/+files/lightdm_bugfix.tar.gz |
|
| 2012-08-28 22:04:43 |
jeremiejig |
lightdm: assignee |
jeremiejig (pauljiang) |
|
|
| 2012-10-01 11:41:07 |
Marc Deslauriers |
bug task added |
|
lightdm (Ubuntu) |
|
| 2012-10-01 11:41:15 |
Marc Deslauriers |
lightdm (Ubuntu): status |
New |
Confirmed |
|
| 2012-10-01 11:41:20 |
Marc Deslauriers |
lightdm (Ubuntu): importance |
Undecided |
Medium |
|
| 2012-10-01 16:48:18 |
Jamie Strandboge |
lightdm (Ubuntu): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2012-10-01 16:48:21 |
Jamie Strandboge |
lightdm (Ubuntu): status |
Confirmed |
In Progress |
|
| 2012-10-01 17:50:02 |
Jamie Strandboge |
bug task added |
|
lightdm-remote-session-uccsconfigure (Ubuntu) |
|
| 2012-10-01 17:50:16 |
Jamie Strandboge |
lightdm-remote-session-uccsconfigure (Ubuntu): status |
New |
Triaged |
|
| 2012-10-01 17:50:16 |
Jamie Strandboge |
lightdm-remote-session-uccsconfigure (Ubuntu): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2012-10-01 17:50:36 |
Jamie Strandboge |
bug task added |
|
lightdm-remote-session-freerdp (Ubuntu) |
|
| 2012-10-01 17:50:51 |
Jamie Strandboge |
lightdm-remote-session-freerdp (Ubuntu): status |
New |
Triaged |
|
| 2012-10-01 17:50:51 |
Jamie Strandboge |
lightdm-remote-session-freerdp (Ubuntu): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2012-10-01 18:05:20 |
Ugur Aslan |
removed subscriber Ugur Aslan |
|
|
|
| 2012-10-01 18:37:52 |
Jamie Strandboge |
lightdm-remote-session-freerdp (Ubuntu): status |
Triaged |
In Progress |
|
| 2012-10-01 18:49:22 |
Jamie Strandboge |
lightdm-remote-session-uccsconfigure (Ubuntu): status |
Triaged |
In Progress |
|
| 2012-10-01 19:39:02 |
Jamie Strandboge |
lightdm (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2012-10-01 19:39:05 |
Jamie Strandboge |
lightdm-remote-session-freerdp (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2012-10-01 19:39:07 |
Jamie Strandboge |
lightdm-remote-session-uccsconfigure (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2012-10-01 19:54:12 |
Launchpad Janitor |
lightdm (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2012-10-01 19:57:11 |
Launchpad Janitor |
lightdm-remote-session-freerdp (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2012-10-01 19:58:10 |
Launchpad Janitor |
lightdm-remote-session-uccsconfigure (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2012-10-01 20:14:42 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lightdm |
|
| 2012-10-01 20:16:03 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lightdm-remote-session-freerdp |
|
| 2012-10-01 20:18:23 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/lightdm-remote-session-uccsconfigure |
|
| 2012-10-15 11:32:38 |
Adolfo Jayme Barrientos |
bug |
|
|
added subscriber Adolfo Jayme Barrientos |
| 2012-11-24 13:04:18 |
Hendrik Schrieber |
bug |
|
|
added subscriber Hendrik Knackstedt |
| 2013-02-11 21:33:14 |
Robert Ancell |
lightdm: status |
In Progress |
Triaged |
|
| 2013-02-11 21:33:16 |
Robert Ancell |
lightdm: importance |
Undecided |
Medium |
|
| 2013-02-11 21:38:50 |
Robert Ancell |
lightdm: status |
Triaged |
Fix Committed |
|
| 2013-02-11 21:38:52 |
Launchpad Janitor |
branch linked |
|
lp:lightdm |
|
| 2013-03-27 02:19:41 |
Robert Ancell |
lightdm: status |
Fix Committed |
Fix Released |
|
| 2013-03-29 13:56:00 |
Hendrik Schrieber |
description |
Binary package hint: chromium-browser
When i opened my guest account to let my friend to use the computer, he couldn't run chromium-browser.
But it works ok when my user account is activated
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 5.0.342.9~r43360-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Sun May 9 19:49:44 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcEnviron:
LANG=tr_TR.utf8
SHELL=/bin/bash
SourcePackage: chromium-browser |
Binary package hint: chromium-browser
[Impact]
Chromium-browser does not launch from guest session.
Fix by Jamie Strandboge:
"It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm remote sessions are shipping policy copies, the maintenance cost is getting high. I will be abstracting out the guest rules into abstracations/lightdm and then have a small snippet using a child profile in abstractions/lightdm_chromium-browser. The guest and remote lightdm profiles can just include these and all the policy is in the abstractions. Using a lightdm.d directory is a good idea, but upstream AppArmor is currently discussing how to best handle .d directories like this, and I'd rather not add another one until that discussions is finished."
[Test Case]
Login to the guest account after booting in Ubuntu Precise and try to run Chromium-browser.
[Regression Potential]
Upstream work on AppArmor was considered here and a child profile was added not touching the other policies so the regression potential is pretty low.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 5.0.342.9~r43360-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Sun May 9 19:49:44 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcEnviron:
LANG=tr_TR.utf8
SHELL=/bin/bash
SourcePackage: chromium-browser |
|
| 2013-03-29 14:08:14 |
Hendrik Schrieber |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2013-03-29 14:09:44 |
Hendrik Schrieber |
tags |
amd64 apparmor apport-bug i386 lucid oneiric patch precise |
amd64 apparmor apport-bug i386 lucid oneiric patch precise verification-needed |
|
| 2013-06-11 16:14:17 |
Jamie Strandboge |
nominated for series |
|
Ubuntu Precise |
|
| 2013-06-11 16:14:17 |
Jamie Strandboge |
bug task added |
|
gdm-guest-session (Ubuntu Precise) |
|
| 2013-06-11 16:14:17 |
Jamie Strandboge |
bug task added |
|
lightdm (Ubuntu Precise) |
|
| 2013-06-11 16:14:17 |
Jamie Strandboge |
bug task added |
|
lightdm-remote-session-freerdp (Ubuntu Precise) |
|
| 2013-06-11 16:14:17 |
Jamie Strandboge |
bug task added |
|
lightdm-remote-session-uccsconfigure (Ubuntu Precise) |
|
| 2013-06-11 16:14:41 |
Jamie Strandboge |
lightdm (Ubuntu Precise): status |
New |
In Progress |
|
| 2013-06-11 16:14:41 |
Jamie Strandboge |
lightdm (Ubuntu Precise): assignee |
|
Jamie Strandboge (jdstrand) |
|
| 2013-06-11 16:15:01 |
Jamie Strandboge |
lightdm-remote-session-freerdp (Ubuntu Precise): status |
New |
Invalid |
|
| 2013-06-11 16:15:16 |
Jamie Strandboge |
lightdm-remote-session-uccsconfigure (Ubuntu Precise): status |
New |
Invalid |
|
| 2013-06-11 16:54:31 |
Jamie Strandboge |
description |
Binary package hint: chromium-browser
[Impact]
Chromium-browser does not launch from guest session.
Fix by Jamie Strandboge:
"It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm remote sessions are shipping policy copies, the maintenance cost is getting high. I will be abstracting out the guest rules into abstracations/lightdm and then have a small snippet using a child profile in abstractions/lightdm_chromium-browser. The guest and remote lightdm profiles can just include these and all the policy is in the abstractions. Using a lightdm.d directory is a good idea, but upstream AppArmor is currently discussing how to best handle .d directories like this, and I'd rather not add another one until that discussions is finished."
[Test Case]
Login to the guest account after booting in Ubuntu Precise and try to run Chromium-browser.
[Regression Potential]
Upstream work on AppArmor was considered here and a child profile was added not touching the other policies so the regression potential is pretty low.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 5.0.342.9~r43360-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Sun May 9 19:49:44 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcEnviron:
LANG=tr_TR.utf8
SHELL=/bin/bash
SourcePackage: chromium-browser |
Binary package hint: chromium-browser
[Impact]
Chromium-browser does not launch from guest session.
Fix by Jamie Strandboge:
"It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm remote sessions are shipping policy copies, the maintenance cost is getting high. I will be abstracting out the guest rules into abstracations/lightdm and then have a small snippet using a child profile in abstractions/lightdm_chromium-browser. The guest and remote lightdm profiles can just include these and all the policy is in the abstractions. Using a lightdm.d directory is a good idea, but upstream AppArmor is currently discussing how to best handle .d directories like this, and I'd rather not add another one until that discussions is finished."
[Test Case]
1. install chromium-browser
2. login to the guest account
3. login to vt1 or login via ssh as a regular user and verify that the lightdm profile
is loaded and guest session applications are confined:
$ sudo aa-status
apparmor module is loaded.
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1378)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1414)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1417)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1418)
...
Note: number of profiles and pids will vary.
4. try to start chromium-browser either via the Dash or a terminal
Prior to upgrading, chromium-browser will fail to start with:
Failed to move to new PID namespace: Operation not permitted
After upgrading, the guest session should be functional and chromium-browser should start. In addition, aa-status should report a child profile for chromium-browser and chromium-browser should be under that confinement:
$ sudo aa-status
apparmor module is loaded.
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3090)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3092)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3093)
...
[Regression Potential]
As mentioned in the Impact, the apparmor profile for lightdm has necessarily been broken out into multiple parts. As such, there is potential that the guest session profile won't
work correctly, however, this is easily seen in the test cases and these changes have been in place since 12.10.
[Other Info]
Attached is a debdiff for 12.04. It:
- adds debian/patches/05_lp577919-fix-chromium-launch.patch which is the same as
debian/patches/09_lp577919-fix-chromium-launch.patch from quantal, except it a)
does not include the fix for bug #1059510, which is uneeded on precise and b)
includes the fix for bug #1189948 to install the abstractions with the correct
permissions
- additionally, debian/lightdm.postinst is updated to reload the apparmor profile
on upgrade to this version of lightdm. The code in question uses the same logic
as dh_apparmor, and I'm not sure why lightdm doesn't use dh_apparmor. Rather than
making several packaging changes to use dh_apparmor, I chose this option to reduce
change.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 5.0.342.9~r43360-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Sun May 9 19:49:44 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcEnviron:
LANG=tr_TR.utf8
SHELL=/bin/bash
SourcePackage: chromium-browser |
|
| 2013-06-11 16:54:52 |
Jamie Strandboge |
gdm-guest-session (Ubuntu Precise): status |
New |
Won't Fix |
|
| 2013-06-11 16:55:33 |
Jamie Strandboge |
attachment added |
|
lightdm_1.2.3-0ubuntu2.2.debdiff https://bugs.launchpad.net/ubuntu/precise/+source/gdm-guest-session/+bug/577919/+attachment/3700993/+files/lightdm_1.2.3-0ubuntu2.2.debdiff |
|
| 2013-06-11 16:57:14 |
Jamie Strandboge |
description |
Binary package hint: chromium-browser
[Impact]
Chromium-browser does not launch from guest session.
Fix by Jamie Strandboge:
"It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm remote sessions are shipping policy copies, the maintenance cost is getting high. I will be abstracting out the guest rules into abstracations/lightdm and then have a small snippet using a child profile in abstractions/lightdm_chromium-browser. The guest and remote lightdm profiles can just include these and all the policy is in the abstractions. Using a lightdm.d directory is a good idea, but upstream AppArmor is currently discussing how to best handle .d directories like this, and I'd rather not add another one until that discussions is finished."
[Test Case]
1. install chromium-browser
2. login to the guest account
3. login to vt1 or login via ssh as a regular user and verify that the lightdm profile
is loaded and guest session applications are confined:
$ sudo aa-status
apparmor module is loaded.
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1378)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1414)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1417)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1418)
...
Note: number of profiles and pids will vary.
4. try to start chromium-browser either via the Dash or a terminal
Prior to upgrading, chromium-browser will fail to start with:
Failed to move to new PID namespace: Operation not permitted
After upgrading, the guest session should be functional and chromium-browser should start. In addition, aa-status should report a child profile for chromium-browser and chromium-browser should be under that confinement:
$ sudo aa-status
apparmor module is loaded.
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3090)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3092)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3093)
...
[Regression Potential]
As mentioned in the Impact, the apparmor profile for lightdm has necessarily been broken out into multiple parts. As such, there is potential that the guest session profile won't
work correctly, however, this is easily seen in the test cases and these changes have been in place since 12.10.
[Other Info]
Attached is a debdiff for 12.04. It:
- adds debian/patches/05_lp577919-fix-chromium-launch.patch which is the same as
debian/patches/09_lp577919-fix-chromium-launch.patch from quantal, except it a)
does not include the fix for bug #1059510, which is uneeded on precise and b)
includes the fix for bug #1189948 to install the abstractions with the correct
permissions
- additionally, debian/lightdm.postinst is updated to reload the apparmor profile
on upgrade to this version of lightdm. The code in question uses the same logic
as dh_apparmor, and I'm not sure why lightdm doesn't use dh_apparmor. Rather than
making several packaging changes to use dh_apparmor, I chose this option to reduce
change.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 5.0.342.9~r43360-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Sun May 9 19:49:44 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcEnviron:
LANG=tr_TR.utf8
SHELL=/bin/bash
SourcePackage: chromium-browser |
Binary package hint: chromium-browser
[Impact]
Chromium-browser does not launch from guest session.
Fix by Jamie Strandboge:
"It would be nice if AppArmor could merge profiles, but we can't yet, so we need to do like you initially did: have two mostly identical profiles. Because the lightdm remote sessions are shipping policy copies, the maintenance cost is getting high. I will be abstracting out the guest rules into abstracations/lightdm and then have a small snippet using a child profile in abstractions/lightdm_chromium-browser. The guest and remote lightdm profiles can just include these and all the policy is in the abstractions. Using a lightdm.d directory is a good idea, but upstream AppArmor is currently discussing how to best handle .d directories like this, and I'd rather not add another one until that discussions is finished."
[Test Case]
1. install chromium-browser
2. login to the guest account
3. login to vt1 or login via ssh as a regular user and verify that the lightdm profile
is loaded and guest session applications are confined:
$ sudo aa-status
apparmor module is loaded.
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1378)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1414)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1417)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (1418)
...
Note: number of profiles and pids will vary.
4. try to start chromium-browser either via the Dash or a terminal
Prior to upgrading, chromium-browser will fail to start with:
Failed to move to new PID namespace: Operation not permitted
After upgrading, the guest session should be functional and chromium-browser should start. In addition, aa-status should report a child profile for chromium-browser and chromium-browser should be under that confinement with other guest session applications under the lightdm-guest-session-wrapper confinement:
$ sudo aa-status
apparmor module is loaded.
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (2667)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (2672)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper (2682)
...
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3090)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3092)
/usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper//chromium_browser (3093)
...
[Regression Potential]
As mentioned in the Impact, the apparmor profile for lightdm has necessarily been broken out into multiple parts. As such, there is potential that the guest session profile won't
work correctly, however, this is easily seen in the test cases and these changes have been in place since 12.10.
[Other Info]
Attached is a debdiff for 12.04. It:
- adds debian/patches/05_lp577919-fix-chromium-launch.patch which is the same as
debian/patches/09_lp577919-fix-chromium-launch.patch from quantal, except it a)
does not include the fix for bug #1059510, which is uneeded on precise and b)
includes the fix for bug #1189948 to install the abstractions with the correct
permissions
- additionally, debian/lightdm.postinst is updated to reload the apparmor profile
on upgrade to this version of lightdm. The code in question uses the same logic
as dh_apparmor, and I'm not sure why lightdm doesn't use dh_apparmor. Rather than
making several packaging changes to use dh_apparmor, I chose this option to reduce
change.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chromium-browser 5.0.342.9~r43360-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic i686
Architecture: i386
Date: Sun May 9 19:49:44 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta i386 (20100318)
ProcEnviron:
LANG=tr_TR.utf8
SHELL=/bin/bash
SourcePackage: chromium-browser |
|
| 2013-06-20 21:32:33 |
Brian Murray |
lightdm (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2013-06-20 21:32:39 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2013-06-22 10:06:13 |
Hendrik Schrieber |
tags |
amd64 apparmor apport-bug i386 lucid oneiric patch precise verification-needed |
amd64 apparmor apport-bug i386 lucid oneiric patch precise verification-done |
|
| 2013-07-01 13:33:23 |
Colin Watson |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2013-07-01 13:55:40 |
Launchpad Janitor |
lightdm (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2013-07-15 06:28:25 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/precise-proposed/lightdm |
|
| 2013-07-25 14:34:08 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/precise-updates/lightdm |
|
