Binary package hint: apparmor
with Firefox 4.0 (currently b12 from the ppa but it happened also with previous betas) on Ubuntu 10.10 I'm getting AppArmor error messages like:
type=1400 audit(1296725581.050:58): apparmor="DENIED" operation="open" parent=1 profile="/usr/lib/firefox-4.0-4.0b12prefirefox{,*[^s][^h]}" name="/dev/nvidiactl" pid=2996 comm="firefox-4.0-bin" requested_mask="rw" denied_mask="rw" fsuid=1000 ouid=0
on certain websites, e.g., http://bodybrowser.googlelabs.com. On that website the images were not displayed until I added
/dev/nvidiactl rw,
/dev/nvidia0 rw,
to the usr.bin.firefox-4.0 profile.
Since I cannot imagine that this is specific to my system (I guess it has something to do with hardware acceleration, and a similar problem might exist for AMD cards) I suggest to add this to that profile by default.
Note that after adding above lines to the profile I still got errors like:
type=1400 audit(1296749585.779:69): apparmor="DENIED" operation="open" parent=1 profile="/usr/lib/firefox-4.0-4.0b12pre/firefox{,*[^s][^h]}" name="/proc/interrupts" pid=3035 comm="firefox-4.0-bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
although I couldn't notice any further problems. Nevertheless it might make sense to also add
/proc/interrupts r,
to the profile.
This issue is not yet fixed in the apparmor profile for FF 4.0 b13.