[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
Jamie, I added an apparmor-easyprof-ubuntu task because the oxide_helper profile is part of the webview policy. Assuming that we want to allow any app embedding a webview to display flash content, we would want those rules to be added to the oxide_helper profile, wouldn’t we? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in apparmor-easyprof-ubuntu package in Ubuntu: Incomplete Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app and to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
The browser can also load the plugin from the partner repository (in /usr/lib/adobe-flashplugin), although that's currently broken for a different reason. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in apparmor-easyprof-ubuntu package in Ubuntu: Incomplete Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app and to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
Perhaps: /opt/google/chrome*/PepperFlash/ r, /opt/google/chrome*/PepperFlash/** r, /opt/google/chrome*/PepperFlash/**.so m, ** Tags added: apparmor -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in apparmor-easyprof-ubuntu package in Ubuntu: Incomplete Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app and to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
An apparmor-easyprof-ubuntu task was added, but I'm not sure why. If this is only for webbrowser-app, just add the aforementioned rules (or similar) to the webbrowser-app policy. These rules won't work on Touch (which is what apparmor-easyprof-ubuntu is primarily for) since those paths aren't found on Touch. Can you elaborate on why this should be in apparmor-easyprof-ubuntu? ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in apparmor-easyprof-ubuntu package in Ubuntu: Incomplete Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app and to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
** Also affects: apparmor-easyprof-ubuntu (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in apparmor-easyprof-ubuntu package in Ubuntu: New Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app and to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
** Description changed: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so - When I add the following to the apparmor profile of webbrowser-app, it - works: + When I add the following to the apparmor profile of webbrowser-app and + to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app and to the oxide_helper subprocess, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
Should also consider https://bugs.launchpad.net/oxide/+bug/1585379 ** Description changed: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so - When I add /opt/google/** to the apparmor profile of webbrowser-app, it - works. + When I add the following to the apparmor profile of webbrowser-app, it + works: + + /opt/google/** r, + + /opt/google/**/*.so mr, + + Don't know what's exactly needed. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add the following to the apparmor profile of webbrowser-app, it works: /opt/google/** r, /opt/google/**/*.so mr, Don't know what's exactly needed. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1585370] Re: pepper flash plugin disallowed from apparmor
** Description changed: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so - When I add /opt/google/** to the apparmor oxide_helper profile of - webbrowser-app, it works. + When I add /opt/google/** to the apparmor profile of webbrowser-app, it + works. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to webbrowser-app in Ubuntu. https://bugs.launchpad.net/bugs/1585370 Title: pepper flash plugin disallowed from apparmor Status in webbrowser-app package in Ubuntu: New Bug description: When launching webbrowser-app from unity8 under confinement, i get disallowed errors for /opt/google/chrome/PepperFlash/manifest.json and /opt/google/chrome/PepperFlash/libpepflashplayer.so When I add /opt/google/** to the apparmor profile of webbrowser-app, it works. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1585370/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
