Firefox snap cannot open files in Samba share

Bug #2064676 reported by James Seiters
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snapd (Ubuntu)
New
Undecided
Unassigned

Bug Description

I have a Samba share that is mounted by SMB4K. All of the other apps on my system can open the HTML files stored there except Firefox. When I try to open a file I get a Access to the file was denied error page in Firefox. The system log reports:
kernel: audit: type=1400 audit(1714687117.353:184): apparmor="DENIED" operation="open" class="file" profile="snap.firefox.firefox" name=2F686F6D652F6A736569746572732F736D62346B2F4F4653414D425345525630303030312F4E6164656E652F576F726B2F53656C662D5075626C697368696E672047656E69652F4A6F62732F4546412F4B6576696E204D6347617272792F46696E616C20446F63756D656E74732F455055422F636861707465725F312E68746D6C pid=2939 comm=53747265616D5472616E7320233430 requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

The user and group on the mounted directory is root. This is a new issue that started to occur in kubuntu 23.10. I am currently running kubuntu 24.04 and still getting this error. Previously I was able to view these files.

My lsb_release -rd:
o LSB modules are available.
Description: Ubuntu 24.04 LTS
Release: 24.04

What I expect to happen:
Firefox should open the HTML files on the mounted Samba share.
What does happen:
I get the access denied error page.

Revision history for this message
James Seiters (cichlasoma) wrote :

Forgot to mention the share is mounted under my home directory.

Revision history for this message
James Seiters (cichlasoma) wrote :

I have fixed the share permissions after filling a bug report with the SMB4K maintainers and Firefox works with the changed permissions.

I am still curious if not being able to open files owned by root in a user's home directory is expected behavior for snap applications. The exact permissions were:

-rwxr-xr-x 1 root root 2301 Apr 29 09:09 about.html*

I can open the file with a non-snap app such as Kate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.