** No longer affects: gnome-session (Ubuntu)
** No longer affects: lightdm-gtk-greeter (Ubuntu)
** No longer affects: unity-greeter (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
Assigning the lightdm task to Robert for now since he's already fixed it
upstream.
** Changed in: lightdm (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => Robert Ancell
(robert-ancell)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which
@robert-ancell I tested your proposed change to the lightdm AppArmor
abstraction and can confirm that it allows the guest session to start
for me. Thanks for looking into the denials and getting that fixed!
I see that you committed the fix upstream. Do you plan on making another
lightdm upload
** No longer affects: xubuntu-default-settings (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login crashing
To manage
@robert-ancell - reverted (Xubuntu) to our old default settings, undid
this change and everything works as before.
Change to xubuntu-default-settings was something pitti appears to have
done
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is
@robert-ancell - tested that on Xubuntu (bug 1627310) works fine there
using something other than light-locker (we have a seperate issue there
bug 1622303)
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
Note you can test changes like this by running:
$ sudoedit /etc/apparmor.d/abstractions/lightdm
$ sudo systemctl reload apparmor.service
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
** Branch linked: lp:lightdm
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User locking problems - guest login crashing
To manage notifications about this
The following fix to the abstraction seems to fix the issue:
=== modified file 'data/apparmor/abstractions/lightdm'
--- data/apparmor/abstractions/lightdm 2015-10-19 10:44:23 +
+++ data/apparmor/abstractions/lightdm 2016-09-28 03:39:54 +
@@ -95,7 +95,7 @@
unix (receive)
Marking the apparmor task as invalid since the changes will likely need
to be made to the profile shipped by lightdm.
** Changed in: apparmor (Ubuntu)
Status: Incomplete => Invalid
** Changed in: lightdm (Ubuntu)
Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)
--
Thanks, I gave it a shot (after putting the profile into complain mode)
and here are the unique denials that I see when starting the guest
session:
operation="mknod" profile="/usr/lib/lightdm/lightdm-guest-session"
name="/proc/1295/fd/2" pid=1295 comm="lightdm-session" requested_mask="c"
Sep 23 21:42:38 wolf-wolf kernel: [ 69.411731] audit: type=1400
audit(1474663358.636:31): apparmor="DENIED" operation="connect"
profile="/usr/lib/lightdm/lightdm-guest-session" pid=3713 comm="initctl"
family="unix" sock_type="stream" protocol=0 requested_mask="send receive
accept"
I think this is an issue with the lightdm(-guest-session) apparmor
profiles.
In dmesg:
laney@yakkety-vm:~$ dmesg | grep DENIED
[ 142.273990] audit: type=1400 audit(1474905574.718:125): apparmor="DENIED"
operation="open" profile="/usr/lib/lightdm/lightdm-guest-session"
(The security team will look soon)
** Changed in: lightdm-gtk-greeter (Ubuntu)
Status: Confirmed => Incomplete
** Changed in: xubuntu-default-settings (Ubuntu)
Status: Confirmed => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs,
Hi - are there any AppArmor denials in the syslog? To check, you can
trigger this bug and then look in /var/log/syslog for lines that contain
'apparmor="DENIED"'. Thanks!
** Changed in: apparmor (Ubuntu)
Importance: Critical => Undecided
** Changed in: apparmor (Ubuntu)
Status:
Tested with Ubuntu MATE, and the guest session works fine there, so the
issue is probably not caused by lightdm.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
>From Xubuntu, see same symptoms as seen previously - that is, can log in
to Guest - logout fails.
Dialogue looks ok for us.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
I could reproduce the issue on Ubuntu 16.10. Additional observations:
* Logging in to a guest session fails also when you do it from the
login screen without being logged in as a regular user, so I doubt
that the issue is related to screen locking.
* The zenity warning dialog shows up, but
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: xubuntu-default-settings (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: gnome-session (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
In Xubuntu we can login to the gues user desktop - but it crashes on
logout rather than logging in.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-session in Ubuntu.
https://bugs.launchpad.net/bugs/1627304
Title:
User
** Also affects: gnome-session (Ubuntu)
Importance: Undecided
Status: New
** Also affects: xubuntu-default-settings (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to
22 matches
Mail list logo
