** Summary changed:

-  [snap] apparmor denials on /sys/devices/virtual/dmi/id/bios_vendor, 
board_name and board_vendor
+ [snap] apparmor denials on /sys/devices/virtual/dmi/id/bios_vendor, 
bios_version, board_name and board_vendor

** Description changed:

  When starting chromium's snap, those messages are logged:
  
  $ journalctl -o cat -k --grep 'apparmor="DENIED"' | grep -F 
snap.chromium.chromium
- audit: type=1400 audit(1666194773.600:424): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/board_name" pid=210441 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
- audit: type=1400 audit(1666194773.600:425): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/bios_vendor" pid=210441 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
- audit: type=1400 audit(1666194773.600:426): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/bios_version" pid=210441 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
- 
+ audit: type=1400 audit(1666201583.608:610): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/board_vendor" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
+ audit: type=1400 audit(1666201583.608:611): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/board_name" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
+ audit: type=1400 audit(1666201583.608:612): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/bios_vendor" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
+ audit: type=1400 audit(1666201583.608:613): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/bios_version" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
  
  Chromium behaves OK but generates log pollution.
  
  Additional info:
  
  $ snap list chromium snapd
  Name      Version         Rev    Tracking       Publisher   Notes
  chromium  106.0.5249.119  2136   latest/stable  canonical✓  -
  snapd     2.57.4          17336  latest/stable  canonical✓  snapd
  
  $ uname -rm
  5.15.0-52-generic x86_64
  
  $ lsb_release -rd
  Description:  Ubuntu 22.04.1 LTS
  Release:      22.04

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1993562

Title:
  [snap] apparmor denials on /sys/devices/virtual/dmi/id/bios_vendor,
  bios_version, board_name and board_vendor

Status in chromium-browser package in Ubuntu:
  New

Bug description:
  When starting chromium's snap, those messages are logged:

  $ journalctl -o cat -k --grep 'apparmor="DENIED"' | grep -F 
snap.chromium.chromium
  audit: type=1400 audit(1666201583.608:610): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/board_vendor" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
  audit: type=1400 audit(1666201583.608:611): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/board_name" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
  audit: type=1400 audit(1666201583.608:612): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/bios_vendor" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
  audit: type=1400 audit(1666201583.608:613): apparmor="DENIED" 
operation="open" profile="snap.chromium.chromium" 
name="/sys/devices/virtual/dmi/id/bios_version" pid=320950 comm="chrome" 
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

  Chromium behaves OK but generates log pollution.

  Additional info:

  $ snap list chromium snapd
  Name      Version         Rev    Tracking       Publisher   Notes
  chromium  106.0.5249.119  2136   latest/stable  canonical✓  -
  snapd     2.57.4          17336  latest/stable  canonical✓  snapd

  $ uname -rm
  5.15.0-52-generic x86_64

  $ lsb_release -rd
  Description:  Ubuntu 22.04.1 LTS
  Release:      22.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1993562/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to