more apparmor warnings

[Jani Monoses]

I see these with image 188 on a non-Nexus4 phone.

Jan 1 01:01:09 ubuntu-phablet kernel: [ 21.553068] (3)[2083:gst-plugin-scan]type=1400 audit(1388538069.315:106): apparmor="DENIED" operation="open" profile="/usr/bin/mediascanner-service-2.0" name="/etc/udev/udev.conf" pid=2083 comm="gst-plugin-scan" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

Jan 1 01:01:14 ubuntu-phablet kernel: [ 26.660993] (1)[3147:gst-plugin-scan]type=1400 audit(1388538074.425:107): apparmor="DENIED" operation="open" profile="/usr/bin/media-hub-server" name="/etc/udev/udev.conf" pid=3147 comm="gst-plugin-scan" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

[Jamie Strandboge (jdstrand)]

This is probably a noisy denial. Was there any loss of functionality with this?

[Jani Monoses (jani)]

I don't know if functionality is affected, as video thumbnails do not show up in the video scope.

[Jamie Strandboge (jdstrand)]

Can you adjust /etc/apparmor.d/usr.bin.mediascanner-service-2.0 to have (before the final '}'):
  /etc/udev/udev.conf r,

Then do:
$ sudo apparmor_parser -r /etc/apparmor.d/usr.bin.mediascanner-service-2.0 and try again (this allows the access).

[Jani Monoses (jani)]

With that change the errors no longer appear.

[Launchpad Janitor (janitor)]

This bug was fixed in the package mediascanner2 - 0.104+14.10.20140825-0ubuntu1

---------------
mediascanner2 (0.104+14.10.20140825-0ubuntu1) utopic; urgency=medium

  [ James Henstridge ]
  * Add support for custom sort orders in query(), queryAlbums() and
    queryArtists() methods. This breaks the ABI, so bump soname.
  * Update AppArmor policy to allow read access to
    /sys/devices/**/video4linux/video** (LP: #1353139)

  [ Ubuntu daily release ]
  * debian/libmediascanner-2.0-2.symbols: auto-update to released
    version

  [ Jussi Pakkanen ]
  * Fix inotify usage.
  * Store information on files that break GStreamer and skip them when
    encountered.
  * Don't call closedir with a null argument.
  * Add database integrity constraints.

  [ Jamie Strandboge ]
  * allow read access to /etc/udev/udev.conf for gstreamer (LP:
    #1356883) (LP: #1356883)
 -- Ubuntu daily release <email address hidden> Mon, 25 Aug 2014 12:52:17 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package media-hub - 2.0.0+14.10.20141015-0ubuntu1

---------------
media-hub (2.0.0+14.10.20141015-0ubuntu1) 14.09; urgency=low

  [ Jamie Strandboge ]
  * debian/usr.bin.media-hub-server: update for recent denials: allow
    read access to /etc/udev/udev.conf (LP: #1356883). add video
    abstraction. silence access to /run/udev/data/** like we do
    elsewhere. allow read on /dev/video*. allow read on
    /sys/devices/**/video4linux/video**. allow read on
    /sys/devices/**/video4linux/**/uevent (LP: #1356883)
  * debian/usr.bin.media-hub-server: allow reads on custom sounds (LP:
    #1377966) (LP: #1377966)

media-hub (2.0.0+14.10.20141014-0ubuntu1) utopic; urgency=low

  [ thomas-voss ]
  * Only expose the service as MPRIS instance if explicitly requested
    via env variable. (LP: #1381069)

media-hub (2.0.0+14.10.20141010-0ubuntu1) utopic; urgency=low

  [ Alberto Aguirre ]
  * Fix potential access to dead objects. (LP: #1364483)
 -- Ubuntu daily release <email address hidden> Wed, 15 Oct 2014 17:45:58 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package media-hub - 2.0.0+14.10.20141015.1-0ubuntu1

---------------
media-hub (2.0.0+14.10.20141015.1-0ubuntu1) 14.09; urgency=low

  [ Ubuntu daily release ]
  * New rebuild forced

  [ Ricardo Mendoza ]
  * Make use of MediaRecorderObserver interface from hybris to register
    as listeners for recording operations, so that we can then decide
    whether to hold a screen lock or not. (LP: #1362658)
 -- Ubuntu daily release <email address hidden> Wed, 15 Oct 2014 21:15:45 +0000