On 11/01/2017 10:38 PM, Philipp Kern wrote: > I'm using thunderbird with apparmor enabled and I get the following deny > with the proprietary nvidia driver installed and active once on every > application startup: > > [37152.076369] audit: type=1400 audit(1509571965.982:138): > apparmor="DENIED" operation="open" profile="thunderbird" > name="/proc/modules" pid=15498 comm="thunderbird" requested_mask="r" > denied_mask="r" fsuid=1000 ouid=0 > [37152.077458] audit: type=1400 audit(1509571965.983:139): > apparmor="DENIED" operation="exec" profile="thunderbird" > name="/usr/bin/nvidia-modprobe" pid=15501 comm="thunderbird" > requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 > > If thunderbird were to use some kind of libGL, I'd understand why this > happens. (The unfortunate fact that the AppArmor profile needs to know > about all dependencies of the libraries the application loads.) I don't > obviously see it in the final process map or the ldd output, though.
Actually it seems the segfault I also get is related (thanks to coredumpctl): > Message: Process 16856 (thunderbird) of user 1000 dumped core. > > Stack trace of thread 16856: > #0 0x00007f2d096265ea n/a (libxul.so) > #1 0x00007f2d16c59940 __run_exit_handlers (libc.so.6) > #2 0x00007f2d16c5999a __GI_exit (libc.so.6) > #3 0x00007f2d03b717cc n/a (libnvidia-glcore.so.375.82) > #4 0x00007f2d03b6f647 n/a (libnvidia-glcore.so.375.82) > #5 0x00007f2d037b2d44 n/a (libnvidia-glcore.so.375.82) > #6 0x00007f2d037b3d19 n/a (libnvidia-glcore.so.375.82) > #7 0x00007f2d047bbe96 n/a (libGL.so.1) > #8 0x00007f2d047ea403 n/a (libGL.so.1) > #9 0x00007f2d047ed767 n/a (libGL.so.1) > #10 0x00007f2d047e1dd1 glXCreateContext (libGL.so.1) > #11 0x00007f2d0962e31f n/a (libxul.so) > #12 0x00007f2d0962e4d9 n/a (libxul.so) > #13 0x00007f2d09628410 n/a (libxul.so) > #14 0x00007f2d0962bf83 n/a (libxul.so) > #15 0x00007f2d0962c276 XRE_main (libxul.so) > #16 0x0000562c86e486dc n/a (thunderbird) > #17 0x0000562c86e47c96 n/a (thunderbird) > #18 0x00007f2d16c442e1 __libc_start_main (libc.so.6) > #19 0x0000562c86e47e9a _start (thunderbird) The application starts just fine despite this. But something in the background denies upon initializing OpenGL. Kind regards Philipp Kern
signature.asc
Description: OpenPGP digital signature
