| 2014-08-15 13:27:36 |
Jamie Strandboge |
bug |
|
|
added bug |
| 2014-08-15 13:28:26 |
Jamie Strandboge |
description |
This is bug #1342129, but for qtwebkit.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
This is bug #1342129, but for qtwebkit. This bug seems to completely break webapps specifying the 13.10 framework (ie, 1.0 apparmor policy).
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
|
| 2014-08-15 13:29:15 |
Jamie Strandboge |
webbrowser-app (Ubuntu): importance |
Undecided |
Critical |
|
| 2014-08-15 13:29:32 |
Oliver Grawert |
bug |
|
|
added subscriber Oliver Grawert |
| 2014-08-15 13:36:40 |
Jamie Strandboge |
webbrowser-app (Ubuntu): importance |
Critical |
Undecided |
|
| 2014-08-15 13:37:02 |
Jamie Strandboge |
description |
This is bug #1342129, but for qtwebkit. This bug seems to completely break webapps specifying the 13.10 framework (ie, 1.0 apparmor policy).
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
This is bug #1342129, but for qtwebkit.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
|
| 2014-08-15 13:37:44 |
Jamie Strandboge |
summary |
qtwebkit-based webapps no longer working |
qtwebkit-based webapps denial for RequestName and bind on org.freedesktop.Application |
|
| 2014-08-15 13:38:39 |
Jamie Strandboge |
description |
This is bug #1342129, but for qtwebkit.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
This is bug #1342129, but for qtwebkit.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
If add add the following rule (which is not safe), there are no more denials:
dbus (bind)
bus=session
name=org.freedesktop.Application,
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
|
| 2014-08-15 13:41:00 |
Jamie Strandboge |
description |
This is bug #1342129, but for qtwebkit.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
If add add the following rule (which is not safe), there are no more denials:
dbus (bind)
bus=session
name=org.freedesktop.Application,
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
This is bug #1342129, but for qtwebkit. This bug doesn't appear to affect the general functionality of the webapp.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
If add add the following rule (which is not safe), there are no more denials:
dbus (bind)
bus=session
name=org.freedesktop.Application,
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
|
| 2014-08-15 13:47:53 |
Jamie Strandboge |
description |
This is bug #1342129, but for qtwebkit. This bug doesn't appear to affect the general functionality of the webapp.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts but with a blank screen. The following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
If add add the following rule (which is not safe), there are no more denials:
dbus (bind)
bus=session
name=org.freedesktop.Application,
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
This is bug #1342129, but for qtwebkit. This bug doesn't appear to affect the general functionality of the webapp.
Test case:
1. install r193 (or later) in the emulator
2. install Pixel Runner from the store
3. Open Pixel Runner
The app starts (but with a blank screen, see bug #1357375) and the following apparmor denial can be observed:
Aug 15 13:17:04 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/DBus" interface="org.freedesktop.DBus" member="RequestName" mask="send" name="org.freedesktop.DBus" pid=3292 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1" peer_profile="unconfined"
As it happens, we can add a rule for this that is safe:
dbus (send)
bus=session
interface=org.freedesktop.DBus
path=/org/freedesktop/DBus
member=RequestName,
However, after adding the above rule to /var/lib/apparmor/profiles/*pixel*, running 'sudo apparmor_parser -r /var/lib/apparmor/profiles/*pixel*', and starting the app, we get a new denial:
Aug 15 13:18:47 ubuntu-phablet dbus[1575]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=3774 profile="com.ubuntu.developer.ogra.pixel-runner_pixel-runner_0.1"
If add add the following rule (which is not safe), there are no more denials:
dbus (bind)
bus=session
name=org.freedesktop.Application,
This denial is the same as in bug #1342129 and we can't safely add policy for it (see other bug for reasons why).
Not sure if this is in webbrowser-app or qtwebkit, please reassign as necessary. |
|
| 2014-09-27 12:56:09 |
Jamie Strandboge |
summary |
qtwebkit-based webapps denial for RequestName and bind on org.freedesktop.Application |
denial for RequestName and bind on org.freedesktop.Application |
|
| 2014-10-30 08:41:25 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/apparmor-easyprof-ubuntu |
|
