*** This bug is a security vulnerability ***

Public security bug reported:

I'm using the apparmor profile for Firefox and have seen messages like
this in my dmesg:

type=1400 audit(1366127952.360:63): apparmor="DENIED"
operation="file_lock" parent=1
profile="/usr/lib/firefox/firefox{,*[^s][^h]}"
name="/home/andrea/.config/libaccounts-glib/accounts.db" pid=2578
comm="firefox" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000

xul-ext-webaccounts should come with an Apparmor child profile which
allows access to ~/.config/libaccounts-glib/accounts.db and all the
other required files (if any).

ProblemType: Bug
DistroRelease: Ubuntu 13.04
Package: xul-ext-webaccounts 0.4.5-0ubuntu4
ProcVersionSignature: Ubuntu 3.8.0-18.28-generic 3.8.6
Uname: Linux 3.8.0-18-generic x86_64
ApportVersion: 2.9.2-0ubuntu8
Architecture: amd64
Date: Tue Apr 16 18:15:58 2013
InstallationDate: Installed on 2011-10-17 (547 days ago)
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64 (20111012)
MarkForUpload: True
SourcePackage: webaccounts-browser-extension
UpgradeStatus: Upgraded to raring on 2013-02-13 (62 days ago)

** Affects: webaccounts-browser-extension (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug raring

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1169633

Title:
  Apparmor denies access to ~/.config/libaccounts-glib/accounts.db

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/webaccounts-browser-extension/+bug/1169633/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to