I just upgraded my laptop to zesty and tested webbrowser-app in the unity8 session. Santosh’s comment (#47) is incorrect. The first denial that I’m getting is /dev/dri/, and I’ve had to add it to the webbrowser-app profile to proceed to get further denials for PCI devices config:
type=AVC msg=audit(1488885677.369:1080): apparmor="DENIED" operation="open" profile="webbrowser-app" name="/dev/dri/" pid=8151 comm ="webbrowser-app" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 After authorizing read access to /dev/dri/, I’m getting the following denials: type=AVC msg=audit(1488885802.466:1091): apparmor="DENIED" operation="open" profile="webbrowser-app" name="/sys/devices/pci0000:00/0000:00:02.0/revision" pid=8237 comm ="webbrowser-app" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=AVC msg=audit(1488885802.466:1092): apparmor="DENIED" operation="open" profile="webbrowser-app" name="/sys/devices/pci0000:00/0000:00:02.0/config" pid=8237 comm ="webbrowser-app" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=AVC msg=audit(1488885802.466:1093): apparmor="DENIED" operation="open" profile="webbrowser-app" name="/sys/devices/pci0000:00/0000:00:02.0/revision" pid=8237 comm ="webbrowser-app" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=AVC msg=audit(1488885802.466:1094): apparmor="DENIED" operation="open" profile="webbrowser-app" name="/sys/devices/pci0000:00/0000:00:02.0/config" pid=8237 comm ="webbrowser-app" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 Which go away when allowing read access to the config files. And thus the application executes fine. To summarize, here are the rules I’ve had to add to the webbrowser-app profile for the app to run under unity8: /dev/dri/ r, /sys/devices/pci[0-9]*/**/config r, -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1590561 Title: webbrowser-app crashes on startup on fresh zesty Unity8: No suitable EGL configs found Status in Canonical System Image: Confirmed Status in Oxide: Invalid Status in apparmor package in Ubuntu: In Progress Status in unity8 package in Ubuntu: Confirmed Status in webbrowser-app package in Ubuntu: In Progress Bug description: When trying to start webbrowser-app a unresponsive window appears and after a few moments it crashes. ProblemType: Bug DistroRelease: Ubuntu 16.04 Package: webbrowser-app 0.23+16.04.20160413-0ubuntu1 ProcVersionSignature: Ubuntu 4.4.0-22.40-generic 4.4.8 Uname: Linux 4.4.0-22-generic x86_64 NonfreeKernelModules: nvidia_uvm nvidia_modeset nvidia ApportVersion: 2.20.1-0ubuntu2 Architecture: amd64 CurrentDesktop: Unity Date: Wed Jun 8 22:56:35 2016 InstallationDate: Installed on 2016-04-28 (41 days ago) InstallationMedia: Ubuntu 16.04 LTS "Xenial Xerus" - Release amd64 (20160420.1) SourcePackage: webbrowser-app UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/canonical-devices-system-image/+bug/1590561/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
