Package: apparmor
Version: 2.11.0-6+b2
Severity: important
apparmor wayland cursor's users need a new item:
/run/user/*/wayland-cursor-*
I applied it to the whole wayland abstraction.
On my box I appended it to the list in
/etc/apparmor.d/abstractions/wayland :
owner /run/user/*/{mesa,mutter,sdl,weston,xwayland,wayland-cursor}-shared-*
rw,
now all is fine.
Best regards
Alban
journald:
août 05 10:23:32 cyclope audit[3141]: AVC apparmor="DENIED" operation="mknod"
profile="/usr/bin/evince" name="/run/user/1000/wayland-cursor-shared-1UbRJA"
pid=3141 comm="evince" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
août 05 10:23:32 cyclope audit[3141]: SYSCALL arch=c000003e syscall=2
success=no exit=-13 a0=c7bd6462a0 a1=800c2 a2=180 a3=1774627f0ba103 items=0
ppid=27393 pid=3141 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000
egid=1000 sgid=1000 fsgid=1000 tty=pts0 ses=18 comm="evince"
exe="/usr/bin/evince" key=(null)
août 05 10:23:32 cyclope audit: PROCTITLE
proctitle=6576696E6365002E2F72656375705F6469722E342F66313839393337355F6D6F64656C652D67657374696F6E2D657863657074696F6E732E5044462E706466
août 05 10:23:32 cyclope kernel: audit: type=1400 audit(1501921412.393:72475):
apparmor="DENIED" operation="mknod" profile="/usr/bin/evince"
name="/run/user/1000/wayland-cursor-shared-1UbRJA" pid=3141 comm="evince"
requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
août 05 10:23:32 cyclope kernel: audit: type=1300 audit(1501921412.393:72475):
arch=c000003e syscall=2 success=no exit=-13 a0=c7bd6462a0 a1=800c2 a2=180
a3=1774627f0ba103 items=0 ppid=27393 pid=3141 auid=1000 uid=1000 gid=1000
euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=pts0 ses=18
comm="evince" exe="/usr/bin/evince" key=(null)
août 05 10:23:32 cyclope kernel: audit: type=1327 audit(1501921412.393:72475):
proctitle=6576696E6365002E2F72656375705F6469722E342F66313839393337355F6D6F64656C652D67657374696F6E2D657863657074696F6E732E5044462E706466
Running evince I get a segfault:
Gdk:ERROR:/build/gtk+3.0-uqUKHM/gtk+3.0-3.22.17/./gdk/wayland/gdkdisplay-wayland.c:1039:_gdk_wayland_display_get_scaled_cursor_theme:
assertion failed: (display_wayland->cursor_theme_name)
Abandon (core dumped)
also reported at:
https://bugs.launchpad.net/ubuntu/+source/evince/+bug/1708753
-- System Information:
Debian Release: buster/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'stable'), (1,
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.11.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8),
LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages apparmor depends on:
ii debconf 1.5.63
ii init-system-helpers 1.49
ii libapparmor-perl 2.11.0-6+b2
ii libc6 2.24-14
ii lsb-base 9.20161125
ii python3 3.5.3-3
apparmor recommends no packages.
Versions of packages apparmor suggests:
ii apparmor-profiles 2.11.0-6
ii apparmor-profiles-extra 1.12
ii apparmor-utils 2.11.0-6+b2
-- Configuration Files:
/etc/apparmor.d/abstractions/wayland changed:
owner /var/run/user/*/weston-shared-* rw,
owner /run/user/*/wayland-[0-9]* rw,
owner /run/user/*/{mesa,mutter,sdl,weston,xwayland,wayland-cursor}-shared-*
rw,
-- debconf information:
apparmor/homedirs:
