Cannot play sound files due to apparmor permission issue
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Media Hub |
Fix Released
|
Undecided
|
Unassigned | ||
| Telegram app |
Invalid
|
Low
|
Unassigned | ||
| mediascanner2 |
Fix Released
|
Undecided
|
Unassigned | ||
| media-hub (Ubuntu) |
Fix Released
|
Critical
|
Unassigned | ||
| mediascanner2 (Ubuntu) |
Fix Released
|
Critical
|
Unassigned | ||
Bug Description
In the clock app we read /usr/share/
Aug 15 11:16:58 ubuntu-phablet kernel: [ 3968.875354] type=1400 audit(140809421
Aug 15 11:16:58 ubuntu-phablet kernel: [ 3968.875506] type=1400 audit(140809421
On talking to jdstrand,
2:09 PM <jdstrand> ah
2:10 PM <jdstrand> we have this rule:owner /tmp/orcexec* m,
2:10 PM <jdstrand> but it is overriden by this: audit deny owner /** m,
2:10 PM <jdstrand> nik90: can you file a bug against media-hub?
Original summary: in /usr/share/sound/** folder
Related branches
- Jamie Strandboge (community): Approve
- PS Jenkins bot (community): Approve (continuous-integration)
- Pete Woods (community): Approve
-
Diff: 12 lines (+0/-3)1 file modifieddebian/usr.bin.mediascanner-service-2.0 (+0/-3)
| Jamie Strandboge (jdstrand) wrote | #1 |
| summary: |
- Cannot play sound files in /usr/share/sound/** folder due to apparmor - permission issue + Cannot play sound files due to apparmor permission issue |
| description: | updated |
| Changed in media-hub (Ubuntu): | |
| importance: | Undecided → Critical |
| Changed in mediascanner2 (Ubuntu): | |
| importance: | Undecided → Critical |
| status: | New → Triaged |
| Changed in media-hub (Ubuntu): | |
| status: | New → Triaged |
| Jamie Strandboge (jdstrand) wrote | #2 |
| Jamie Strandboge (jdstrand) wrote | #3 |
| Changed in media-hub (Ubuntu): | |
| status: | Triaged → Fix Committed |
| Launchpad Janitor (janitor) wrote | #4 |
| Changed in media-hub (Ubuntu): | |
| status: | Fix Committed → Fix Released |
| Changed in libqtelegram: | |
| status: | New → Confirmed |
| importance: | Undecided → High |
| Changed in mediascanner2 (Ubuntu): | |
| status: | Triaged → In Progress |
| Changed in mediascanner2: | |
| status: | New → In Progress |
| tags: | added: patch |
| Launchpad Janitor (janitor) wrote | #5 |
| Changed in mediascanner2 (Ubuntu): | |
| status: | In Progress → Fix Released |
| Changed in libqtelegram: | |
| importance: | High → Low |
| Changed in media-hub: | |
| status: | New → Fix Released |
| Changed in mediascanner2: | |
| status: | In Progress → Fix Released |
| Changed in libqtelegram: | |
| status: | Confirmed → Invalid |
media-hub-server will likely fail to play all kinds of files, not just those in /usr/share/sounds because we have an explicit deny rule that is overriding our rule to allow mmap of /tmp/orcexec.