apparmor denied access to mountinfo

Bug #659450 reported by Luigi Maselli
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Fix Released
Undecided
Jamie Strandboge

Bug Description

Binary package hint: apparmor

Hi, I'm not able to do some HTTP requests, here is the response on every web browsers.

[ 17.824878] phy0: Selected rate control algorithm 'ath9k_rate_control'
[ 17.827007] Registered led device: ath9k-phy0::radio
[ 17.827079] Registered led device: ath9k-phy0::assoc
[ 17.827149] Registered led device: ath9k-phy0::tx
[ 17.827225] Registered led device: ath9k-phy0::rx
[ 17.827248] phy0: Atheros AR9285 Rev:2 mem=0xf8720000, irq=17
...
[ 87.724556] audit_printk_skb: 18 callbacks suppressed
[ 87.724567] type=1400 audit(1286908327.162:18): apparmor="DENIED" operation="open" parent=1 profile="/usr/lib/firefox-4.0b8pre/firefox{,*[^s][^h]}" name="/proc/1700/mountinfo" pid=1750 comm="firefox-4.0-bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

Tags: apparmor

Related branches

Revision history for this message
Luigi Maselli (grigio) wrote :

Ok, I noticed it doesn't happen with the default Firefox

Changed in apparmor (Ubuntu):
status: New → Fix Committed
affects: apparmor (Ubuntu) → firefox (Ubuntu)
Changed in firefox (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
tags: added: apparmor
summary: - 408 Request Time-out Server timeout waiting for the HTTP request from
- the client.
+ apparmor denied access to mountinfo
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (3.5 KiB)

This bug was fixed in the package firefox - 4.0~b8+nobinonly-0ubuntu1

---------------
firefox (4.0~b8+nobinonly-0ubuntu1) natty; urgency=low

  * New upstream release v4.0b8 (FIREFOX_4_0b8_RELEASE)

  [ Chris Coulson <email address hidden> ]
  * Add a hack to the launcher to handle being launched from an alternative,
    which is a symlink to the launcher script, and breaks the current launch
    mechanism. Also remove a useless stat() from the current script
    - update debian/firefox.sh.in
  * Re-add patch that got dropped to not remove and re-add search plugins
    during upgrade
    - add debian/patches/bz534663_attXXX_normalize_distribution_searchplugins.patch
    - update debian/patches/series
  * Move libmozgnome.so to the main package in common-binary-predeb-arch.
    The previous method of deleting it from -gnome-support and copying it to
    the main package from debian/tmp in each of the binary-predeb targets
    meant that we were shipping an unstripped copy, which caused a lintian
    error. This new method ensures we retain the stripped SO and we still
    only move it after dh_shlibdeps has run
    - update debian/rules
  * Support debug builds. By setting "debug" in DEB_BUILD_OPTIONS, firefox
    will build with --enable-debug and --disable-optimize
    - update debian/rules
    - update debian/mozconfig.in
  * Really build with --disable-gnomevfs this time
    - update debian/mozconfig.in
  * Refresh patches after landing of bmo: 588410 aka Fix make install to
    work with omnijar
    - remove debian/patches/bz588410_fix_make_install_with_omnijar.patch
    - update debian/patches/series
  * Generate the en-US xpi at build time again for importing in to Launchpad
    - update debian/rules
    - update debian/translation-support/install.rdf.in

  [ Jamie Strandboge <email address hidden> ]
  * update debian/usr.bin.firefox.apparmor.10.10:
    - deny write to /var/cache/fontconfig
    - allow read to @{HOME}/.local/share/applications/mimeapps.list
    - allow read to @{PROC}/[0-9]*/mountinfo (LP: #659450)
    - allow read to /tmp/.X[0-9]*-lock
    - deny read to @{HOME}/.local/share/recently-used.xbel
    - deny execute of /usr/bin/gconftool-2
    - allow read to @{HOME}/.thumbnails/*/*.png
    - allow read/write to @{HOME}/.gnome2/firefox*-bin-*
  * update debian/usr.bin.firefox.apparmor.{9.04,10.04}:
    - deny write to /var/cache/fontconfig
    - allow read to @{PROC}/[0-9]*/mountinfo (LP: #659450)
    - allow read to /tmp/.X[0-9]*-lock
    - deny execute of /usr/bin/gconftool-2
    - remove extraneous @{HOME}/.config/ibus/bus/
  * add debian/usr.bin.firefox.apparmor.11.04:
    - based on 10.10
    - remove redundant abstractions included by the gnome abstraction
      (LP: #692406)
  * debian/rules: updated for usr.bin.firefox.apparmor.11.04

  [ Micah Gersten <email address hidden> ]
  * Change xubuntu applications defaults list in natty apparmor profile; Path
    changed in xubuntu-default-settings (11.04.0)
    - update usr.bin.firefox.apparmor.11.04
  * fix LP: #694391 - Kubuntu Firefox Installer Fails; Add Replaces on
    kubuntu-firefox-installer again in firefox-branding
    - update debian/control

  [ Felix Geyer...

Read more...

Changed in firefox (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.