Your message dated Sat, 09 Sep 2017 21:34:12 +0000
with message-id <[email protected]>
and subject line Bug#867692: fixed in apparmor-profiles-extra 1.13
has caused the Debian Bug report #867692,
regarding apparmor-profiles-extra: Totem can't open any video
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
867692: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867692
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: apparmor-profiles-extra
Version: 1.12
Severity: important
This is what I get with `sudo tail /var/log/audit/audit.log -f | grep DENIED`
when I open any video:
type=AVC msg=audit(1499516756.417:5744): apparmor="DENIED" operation="open"
profile="/usr/bin/totem" name="/home/elia/.cache/mesa/index" pid=4881
comm="totem" requested_mask="rwc" denied_mask="rwc" fsuid=1000 ouid=1000
type=AVC msg=audit(1499516756.529:5745): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/index.theme" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.529:5746): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.529:5747): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.533:5748): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.533:5749): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.533:5750): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.533:5751): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.533:5752): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.537:5753): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.537:5754): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.537:5755): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name="/var/lib/flatpak/exports/share/icons/hicolor/icon-theme.cache" pid=4881
comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
type=AVC msg=audit(1499516756.677:5756): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name=2F646174692F566964656F2F54686520496D69746174696F6E2047616D652E6D6B76
pid=4881 comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
type=AVC msg=audit(1499516756.677:5757): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name=2F646174692F566964656F2F54686520496D69746174696F6E2047616D652E6D6B76
pid=4881 comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
type=AVC msg=audit(1499516756.677:5758): apparmor="DENIED" operation="open"
profile="/usr/bin/totem"
name=2F646174692F566964656F2F54686520496D69746174696F6E2047616D652E6D6B76
pid=4881 comm="totem" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
It seems to block mesa cache too. Maybe that should be added to an abstraction.
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (800, 'testing'), (600, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.11.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8),
LANGUAGE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages apparmor-profiles-extra depends on:
ii apparmor 2.11.0-6
apparmor-profiles-extra recommends no packages.
apparmor-profiles-extra suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: apparmor-profiles-extra
Source-Version: 1.13
We believe that the bug you reported is fixed in the latest version of
apparmor-profiles-extra, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
intrigeri <[email protected]> (supplier of updated apparmor-profiles-extra
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 09 Sep 2017 21:24:02 +0000
Source: apparmor-profiles-extra
Binary: apparmor-profiles-extra
Architecture: source
Version: 1.13
Distribution: unstable
Urgency: medium
Maintainer: Debian AppArmor Team <[email protected]>
Changed-By: intrigeri <[email protected]>
Closes: 866792 867692
Description:
apparmor-profiles-extra - Extra profiles for AppArmor Security policies
Changes:
apparmor-profiles-extra (1.13) unstable; urgency=medium
.
* Add a script allowing the source package to put specific profiles
in complain mode.
* Put the irssi profile in complain mode (Closes: #866792).
* Totem: update to the version from the apparmor-profiles repository
at commit bfc0bff (Closes: #867692).
Checksums-Sha1:
7d5426c845ebaeaa1b90fcb961a33262233e7f0b 1793 apparmor-profiles-extra_1.13.dsc
1161668750294d3a6db637461ab98c487e1998d1 8248
apparmor-profiles-extra_1.13.tar.xz
Checksums-Sha256:
9c4d62f4c43e6b98086e695ea447199e9330f145b3a6b957add0318dc3f7eee9 1793
apparmor-profiles-extra_1.13.dsc
996f113c691be470fe326e08b2ea458d6fbc3ef2db1d8adabfd48ba5bb794e7b 8248
apparmor-profiles-extra_1.13.tar.xz
Files:
17f9c0cca8d646275c3e16b5c823715c 1793 admin extra
apparmor-profiles-extra_1.13.dsc
ed9dd84b89f9e5b1da3f676f20ac4267 8248 admin extra
apparmor-profiles-extra_1.13.tar.xz
-----BEGIN PGP SIGNATURE-----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=rElq
-----END PGP SIGNATURE-----
--- End Message ---
