Apparmor stopping Google Chrome from launching in guest session

Bug #1361372 reported by Martyn Welch
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
lightdm (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

As mentioned in comment 5 of bug #1298021, it seems that Google have modified how they package Chrome in their repository.

Based on the fix for that bug, it appears that Chrome was packaged as /opt/google/chrome-stable/google-chrome-stable, /opt/google/chrome-beta/google-chrome-beta or /opt/google/chrome-unstable/google-chrome-unstable based on the package version. The current stable package, google-chrome-stable version 36.0.1985.143-1, from the repository at http://dl.google.com/linux/chrome/deb/installs the binary as /opt/google/chrome/google-chrome, which doesn't match any of the rules added to Apparmor.

Adding the following additional line caused the browser to work in guest mode for me:

  /opt/google/chrome/google-chrome Cx -> chromium,

$ lsb_release -rd
Description: Ubuntu 14.04.1 LTS
Release: 14.04

$ apt-cache policy lightdm
lightdm:
  Installed: 1.10.1-0ubuntu1
  Candidate: 1.10.1-0ubuntu1
  Version table:
 *** 1.10.1-0ubuntu1 0
        500 http://gb.archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1.10.0-0ubuntu3 0
        500 http://gb.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages

Changed in lightdm (Ubuntu):
status: New → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package lightdm - 1.11.9-0ubuntu2

---------------
lightdm (1.11.9-0ubuntu2) utopic; urgency=medium

  * debian/patches/06_apparmor-unix.patch: update for addr= rules
  * debian/patches/07_apparmor-chrome.patch:
    - allow new path to Google Chrome (LP: #1361372)
    - allow read of @{PROC}/[0-9]*/statm
  * debian/patches/08_apparmor-updates.patch:
    - allow 'rw' on /etc/compizconfig/unity.ini (continue workaround for
     LP: 697678)
    - allow read of @{PROC}/sys/vm/overcommit_memory
    - allow write to /run/uuidd/request
 -- Jamie Strandboge <email address hidden> Thu, 18 Sep 2014 12:18:12 -0500

Changed in lightdm (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.