I noticed the following denial when using Oxide under X: May 15 16:52:06 localhost kernel: [318977.280956] type=1400 audit(1400190726.317:409): apparmor="DENIED" operation="file_mmap" profile="com.ubuntu.developer.jdstrand.rottentomatoes_rottentomatoes_0.10" name="/usr/lib/x86_64-linux-gnu/egl/egl_gallium.so" pid=3920 comm="webapp-containe" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
Attached is a patch to the X abstraction to fix this issue. This is fine for 2.8 as well if people want it there. -- Jamie Strandboge http://www.ubuntu.com/
Author: Jamie Strandboge <[email protected]> Description: allow access to egl libraries in X abstraction Bug: https://launchpad.net/bugs/1320014 Acked-By: Jamie Strandboge <[email protected]> === modified file 'profiles/apparmor.d/abstractions/X' --- profiles/apparmor.d/abstractions/X 2014-02-14 01:23:56 +0000 +++ profiles/apparmor.d/abstractions/X 2014-05-15 22:03:29 +0000 @@ -32,6 +32,9 @@ /usr/share/X11/** r, /usr/X11R6/**.so* mr, + # EGL + /usr/lib/@{multiarch}/egl/*.so* mr, + # DRI /usr/lib{,32,64}/dri/** mr, /usr/lib/@{multiarch}/dri/** mr,
signature.asc
Description: OpenPGP digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
