** Summary changed:
- AppArmor blocks Firefox 3.6 from opening many important apps
+ AppArmor blocks Firefox 3.6 from opening emacs and scid
** Description changed:
Binary package hint: firefox-3.5
Using Firefox 3.6 from daily build ppa (this is only in 3.6, not in
3.5). I noticed that many important apps don't open as external clients
- whenever I download associated files. Some examples from kern.log:
+ whenever I download associated files. I would suggest especially to
+ include
- nano
+ /usr/bin/scid Uxr,
+ /usr/bin/emacs Uxr,
+ /usr/bin/geany Uxr,
+ /usr/bin/xemacs Uxr,
- Dec 24 23:21:11 amilo kernel: [30315.457871] type=1503
- audit(1261693271.916:360): operation="open" pid=6163 parent=1
- profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="::r"
- denied_mask="::r" fsuid=1000 ouid=0 name="/bin/nano"
-
- scid
-
- Dec 20 10:58:58 amilo kernel: [ 486.135551] type=1503
- audit(1261303138.592:27): operation="exec" pid=11744 parent=11743
- profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="::x"
- denied_mask="::x" fsuid=1000 ouid=0 name="/usr/local/bin/scid"
-
- other blocked apps are for example, emacs23, geany, loadkeys, less,
- lesspipe....
-
- UPDATE: I noticed that these things can easily be fixed by adding the
- respective apps to /etc/apparmor.d/usr.bin.firefox-3.6. For example, I
- added the lines:
-
- /usr/local/bin/scid Uxr,
- /usr/bin/emacs Uxr,
-
- to the #miscellaneous section to enable scid and emacs23. If I
- understand correctly, then the AppArmor default settings have changed
- recently in Firefox 3.6. So I would suggest that a lot more apps should
- be whitelisted: geany, nano, probly many more that I cannot recall atm.
+ to the #miscellaneous section of /etc/apparmor.d/usr.bin.firefox-3.6 to
+ enable scid and emacs23.
** Description changed:
Binary package hint: firefox-3.5
Using Firefox 3.6 from daily build ppa (this is only in 3.6, not in
3.5). I noticed that many important apps don't open as external clients
whenever I download associated files. I would suggest especially to
include
/usr/bin/scid Uxr,
/usr/bin/emacs Uxr,
/usr/bin/geany Uxr,
/usr/bin/xemacs Uxr,
- to the #miscellaneous section of /etc/apparmor.d/usr.bin.firefox-3.6 to
- enable scid and emacs23.
+ to the #miscellaneous section of /etc/apparmor.d/usr.bin.firefox-3.6.
--
AppArmor blocks Firefox 3.6 from opening emacs and scid
https://bugs.launchpad.net/bugs/500244
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
