** Description changed: - software-center crashed with GError in run (): Failed to execute child - process «/usr/share /software-center/piston_generic_helper.py» (Access - Denied) + Impact: apturl is currently broken when the firefox (or chromium- + browser) AppArmor profile is enabled since software-center is prevented + from launching. - steps to reproduce: + Development fix: the fix will be applied to Quantal via pocket copy of + this SRU. - 1. load in the browser (I used chromium) deb package - 2. open it from the downloads panel + Stable fix: this was fixed in r2038 by adding the following to /etc/apparmor.d/abstractions/ubuntu-helpers: + # Allow exec of software-center scripts. We may need to allow wider + # permissions for /usr/share, but for now just do this. (LP: #972367) + /usr/share/software-center/* Pixr, - ProblemType: Crash - DistroRelease: Ubuntu 12.04 - Package: software-center 5.1.14.1 - ProcVersionSignature: Ubuntu 3.2.0-21.34-generic 3.2.13 - Uname: Linux 3.2.0-21-generic x86_64 - ApportVersion: 2.0-0ubuntu2 - Architecture: amd64 - Date: Tue Apr 3 19:41:32 2012 - ExecutablePath: /usr/share/software-center/software-center - InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012) - InterpreterPath: /usr/bin/python2.7 - PackageArchitecture: all - ProcCmdline: /usr/bin/python /usr/bin/software-center /home/username/Загрузки/openastro.org_1.1.25-0ubuntu1~oneiric_amd64.deb - PythonArgs: ['/usr/bin/software-center', '/home/username/\xd0\x97\xd0\xb0\xd0\xb3\xd1\x80\xd1\x83\xd0\xb7\xd0\xba\xd0\xb8/openastro.org_1.1.25-0ubuntu1~oneiric_amd64.deb'] - SourcePackage: software-center - Title: software-center crashed with GError in run(): Не удалось выполнить процесс-потомок «/usr/share/software-center/piston_generic_helper.py» (Отказано в доступе) - UpgradeStatus: Upgraded to precise on 2012-03-03 (30 days ago) - UserGroups: adm admin cdrom dialout dip lpadmin plugdev sambashare sudo + TEST CASE: + 1. Download a small deb and put it in /tmp. Eg: + $ sudo apt-get install -d hello + $ cp /var/cache/apt/archives/hello_*.deb ~/Desktop + + 2. Enable the firefox profile: + $ sudo apt-get install apparmor-utils + $ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox + + 3. Restart all instances of firefox + + 4. Navigate to file:///tmp/hello_2.7-2_amd64.deb + + At this point, software center should open and you can install the deb. + Without the patch, software center does not open and there are AppArmor + denials in /var/log/kern.log. + + Regression potential: the regression potential is considered low. + Launching software-center is currently broken, so there is no regression + potential there, however ubuntu-helpers is included by the evince + profile so a mistake in the added policy could prevent evince policy + from loading.
** Description changed: + SRU Justification: + Impact: apturl is currently broken when the firefox (or chromium- browser) AppArmor profile is enabled since software-center is prevented from launching. Development fix: the fix will be applied to Quantal via pocket copy of this SRU. Stable fix: this was fixed in r2038 by adding the following to /etc/apparmor.d/abstractions/ubuntu-helpers: - # Allow exec of software-center scripts. We may need to allow wider - # permissions for /usr/share, but for now just do this. (LP: #972367) - /usr/share/software-center/* Pixr, + # Allow exec of software-center scripts. We may need to allow wider + # permissions for /usr/share, but for now just do this. (LP: #972367) + /usr/share/software-center/* Pixr, TEST CASE: 1. Download a small deb and put it in /tmp. Eg: $ sudo apt-get install -d hello $ cp /var/cache/apt/archives/hello_*.deb ~/Desktop 2. Enable the firefox profile: $ sudo apt-get install apparmor-utils $ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox 3. Restart all instances of firefox 4. Navigate to file:///tmp/hello_2.7-2_amd64.deb At this point, software center should open and you can install the deb. Without the patch, software center does not open and there are AppArmor denials in /var/log/kern.log. Regression potential: the regression potential is considered low. Launching software-center is currently broken, so there is no regression potential there, however ubuntu-helpers is included by the evince profile so a mistake in the added policy could prevent evince policy from loading. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/972367 Title: software-center crashed with GError in run (): Failed to execute child process «/usr/share /software-center/piston_generic_helper.py» (Access Denied) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/972367/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
