Ubuntu
firefox package

apparmor block /usr/bin/kde4-config" and others audit

Bug #513160 reported by starslights
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Fix Released
High
Jamie Strandboge
Ubuntu lucid-alpha-3

Bug Description

Binary package hint: apparmor

Hello, today i have need to reinstall firefox due of some problems and after have done, it look like some access are refused.

I file a new one because seem not the same as the early big already fixed.

2010-01-27 10:31:09 moon kernel [240798.567071] type=1505 audit(1264584669.433:32): operation="profile_load" pid=18821 name=/usr/lib/firefox-3.6.1pre/firefox-*bin
2010-01-27 10:31:48 moon kernel [240837.536721] type=1503 audit(1264584708.406:33): operation="open" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/firefox/profile/chrome/userChrome-example.css"
2010-01-27 10:31:48 moon kernel [240837.536936] type=1503 audit(1264584708.406:34): operation="open" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/firefox/profile/chrome/userContent-example.css"
2010-01-27 10:31:48 moon kernel [240837.537133] type=1503 audit(1264584708.406:35): operation="open" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/firefox/profile/bookmarks.html"
2010-01-27 10:31:48 moon kernel [240837.537328] type=1503 audit(1264584708.406:36): operation="open" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/firefox/profile/localstore.rdf"
2010-01-27 10:31:48 moon kernel [240837.537521] type=1503 audit(1264584708.406:37): operation="open" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/firefox/profile/prefs.js"
2010-01-27 10:31:48 moon kernel [240837.537711] type=1503 audit(1264584708.406:38): operation="open" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/firefox/profile/mimeTypes.rdf"
2010-01-27 10:31:48 moon kernel [240838.023162] type=1503 audit(1264584708.893:39): operation="mkdir" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="w::" denied_mask="w::" fsuid=1000 ouid=1000 name="/usr/share/mozilla/"
2010-01-27 10:31:49 moon kernel [240838.951373] type=1503 audit(1264584709.816:40): operation="mkdir" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="w::" denied_mask="w::" fsuid=1000 ouid=1000 name="/usr/share/mozilla/"
2010-01-27 10:31:50 moon kernel [240839.433326] type=1503 audit(1264584710.305:41): operation="mkdir" pid=18867 parent=18863 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="w::" denied_mask="w::" fsuid=1000 ouid=1000 name="/usr/share/mozilla/"
2010-01-27 10:32:07 moon kernel [240856.733555] type=1503 audit(1264584727.604:42): operation="mkdir" pid=18959 parent=18955 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="w::" denied_mask="w::" fsuid=1000 ouid=1000 name="/usr/share/mozilla/"
2010-01-27 10:32:08 moon kernel [240857.403617] type=1503 audit(1264584728.274:43): operation="mkdir" pid=18959 parent=18955 profile="/usr/lib/firefox-3.6.1pre/firefox-*bin" requested_mask="w::" denied_mask="w::" fsuid=1000 ouid=1000 name="/usr/share/mozilla/"
2010-01-27 10:38:06 moon kernel [241216.047321] type=1505 audit(1264585086.913:44): operation="profile_replace" pid=19405 name=/usr/lib/firefox-3.5.*/firefox
2010-01-27 10:39:31 moon kernel [241300.574342] type=1503 audit(1264585171.445:45): operation="exec" pid=19487 parent=19482 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:31 moon kernel [241300.575914] type=1503 audit(1264585171.445:46): operation="open" pid=19482 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:39:31 moon kernel [241300.596999] type=1503 audit(1264585171.465:47): operation="exec" pid=19490 parent=19482 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:32 moon kernel [241301.186911] type=1503 audit(1264585172.053:48): operation="exec" pid=19496 parent=19482 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:32 moon kernel [241301.188321] type=1503 audit(1264585172.053:49): operation="open" pid=19482 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:39:32 moon kernel [241301.208639] type=1503 audit(1264585172.074:50): operation="exec" pid=19498 parent=19482 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:33 moon kernel [241302.302438] type=1503 audit(1264585173.173:51): operation="exec" pid=19506 parent=19482 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:33 moon kernel [241302.303308] type=1503 audit(1264585173.173:52): operation="open" pid=19482 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:39:33 moon kernel [241302.324560] type=1503 audit(1264585173.194:53): operation="exec" pid=19508 parent=19482 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:50 moon kernel [241319.659076] __ratelimit: 9 callbacks suppressed
2010-01-27 10:39:50 moon kernel [241319.659080] type=1503 audit(1264585190.525:57): operation="exec" pid=19563 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:50 moon kernel [241319.660763] type=1503 audit(1264585190.525:58): operation="open" pid=19558 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:39:50 moon kernel [241319.679511] type=1503 audit(1264585190.545:59): operation="exec" pid=19565 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:52 moon kernel [241321.687235] type=1503 audit(1264585192.553:60): operation="exec" pid=19574 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:39:52 moon kernel [241321.689072] type=1503 audit(1264585192.553:61): operation="open" pid=19558 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:39:52 moon kernel [241321.710822] type=1503 audit(1264585192.574:62): operation="exec" pid=19576 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:40:00 moon kernel [241329.710929] type=1503 audit(1264585200.574:63): operation="exec" pid=19589 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:40:00 moon kernel [241329.712786] type=1503 audit(1264585200.584:64): operation="open" pid=19558 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:40:00 moon kernel [241329.732540] type=1503 audit(1264585200.604:65): operation="exec" pid=19591 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:40:02 moon kernel [241331.233213] type=1503 audit(1264585202.104:66): operation="exec" pid=19599 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"
2010-01-27 10:40:02 moon kernel [241331.234162] type=1503 audit(1264585202.104:67): operation="open" pid=19558 parent=3530 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/kde4rc"
2010-01-27 10:40:02 moon kernel [241331.252979] type=1503 audit(1264585202.124:68): operation="exec" pid=19601 parent=19558 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/kde4-config"

i run kubuntu karmic 9.10 on x86 64, Linux moon 2.6.31-18-generic #55-Ubuntu SMP Fri Jan 8 14:54:52 UTC 2010 x86_64 GNU/Linux
Firefox 3.6.1pre

ProblemType: Bug
ApparmorStatusOutput:
 Error: command /usr/sbin/apparmor_status failed with exit code 4: You do not have enough privilege to read the profile set.
 apparmor module is loaded.
Architecture: amd64
Date: Wed Jan 27 11:21:20 2010
DistroRelease: Ubuntu 9.10
InstallationMedia: Kubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
NonfreeKernelModules: nvidia
Package: apparmor 2.3.1+1403-0ubuntu27.3
ProcEnviron:
 LANGUAGE=
 LANG=fr_CH.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-18.55-generic
SourcePackage: apparmor
Uname: Linux 2.6.31-18-generic x86_64

Tags: apparmor

Related branches

lp:ubuntu/lucid/firefox
Revision history for this message
starslights (starslights) wrote :
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This is more issues with the rename of the profile.

affects: apparmor (Ubuntu) → firefox (Ubuntu)
Changed in firefox (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → High
milestone: none → lucid-alpha-3
status: New → In Progress
tags: added: apparmor
removed: amd64 apport-bug
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package firefox - 3.6+nobinonly-0ubuntu2

---------------
firefox (3.6+nobinonly-0ubuntu2) lucid; urgency=low

  [ Alexander Sack <email address hidden> ]
  * fix firefox-3.5-gnome-support transitional package typo; depend
    on firefox-gnome-support instead of firefox-3.5-gnome-support
    - update debian/control

  [ Michael Vogt <email address hidden> ]
  * add missing Replace: firefox-3.0 for the firefox-branding package
    (LP: #518747). This fixes a upgrade issues from hardy to lucid.
    - update debian/control

  [ Jamie Strandboge <email address hidden> ]
  * debian/firefox.postinst.in:
    - remove AppArmor profile from dailies on upgrades (LP: #512470)
    - remove extraneous -T -W from apparmor_parser
    - check for disabled profile ourselves, since apparmor_parser on Ubuntu
      9.04 and earlier didn't honor the disable/ directory
  * debian/firefox.preinst.in: unconditionally disable the AppArmor profile
    on Ubuntu 9.04 and earlier, since it requires abstractions found only
    in 9.10
  * debian/control: have firefox Depends on lsb-release (needed in preinst)
  * debian/usr.bin.firefox.apparmor.in:
    - adjustments in rules for name change (LP: #513160)
    - allow /usr/bin/tr

  [ Micah Gersten <email address hidden> ]
  * Add replaces to firefox-branding on kubuntu-firefox-installer (LP: #439431)
    - update debian/control
  * Add firefox 3 transitional packages and Replaces/Provides/Conflicts
    (LP: #513074)
    - update debian/control
  * Don't install firefox.xml for adding entries to
    gnome-default-applications-properties (LP: #519606)
    - update debian/control
  * Update rosetta template name to firefox-3.6
    - update debian/translation-support/install.rdf.in
  * Update EM_TRANSLATION variables for firefox 3.6
    - update debian/rules
 -- Micah Gersten <email address hidden> Wed, 10 Feb 2010 14:52:12 -0600

Changed in firefox (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.