[Desktop-packages] [Bug 1298021] Re: Google Chrome (not chromium) won't start in guest session

2015-03-18 Thread Jamie Strandboge
Eric, this bug is closed and was fixed for the original bug. Can you file a new bug using 'ubuntu-bug apparmor' after you see the issue? Thanks. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu.

[Desktop-packages] [Bug 1431641] Re: Apparmor denial when viewing print preview in evince

2015-03-13 Thread Jamie Strandboge
Charles, can you adjust the evince-previewer policy in /etc/apparmor.d/usr.bin.evince to have: ... /usr/bin/evince-previewer { #include abstractions/dbus-strict ... } Then reload the profile with: $ sudo apparmor_parser -r /etc/apparmor.d/usr.bin.evince then try to reproduce the bug and

[Desktop-packages] [Bug 1426923] Re: Allow ubuntu-system-settings to set a device's firmware through wpa_supplicant

2015-03-02 Thread Jamie Strandboge
Jonas asked me to take a look at the security implications of this. Some observations: * on touch, /var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.touch.NetworkManager.pkla allows anyone in the 'sudo' group to access all of NetworkManager. This is not ideal but was the decision taken

[Desktop-packages] [Bug 1392380] Re: OA gives out all tokens to any app

2015-02-13 Thread Jamie Strandboge
FYI, after talking with David Barth, it looks like all the pieces landed in ubuntu-rtm, but signon-apparmor-extension is not installed yet on the images so the bug isn't quite fixed yet. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to

[Desktop-packages] [Bug 1419394] Re: I don't know

2015-02-09 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1419394 Title: I don't know Status in xorg package in Ubuntu: New Bug

[Desktop-packages] [Bug 1419934] [NEW] Please update to 35.0.1

2015-02-09 Thread Jamie Strandboge
Public bug reported: Tracking bug for various bug fixes for 35.0, including https://bugzilla.mozilla.org/show_bug.cgi?id=1122445. See https://www.mozilla.org/en-US/firefox/35.0.1/releasenotes/ for complete list. ** Affects: firefox (Ubuntu) Importance: Undecided Status: Fix

[Desktop-packages] [Bug 1419934] Re: Please update to 35.0.1

2015-02-09 Thread Jamie Strandboge
Fixed in http://www.ubuntu.com/usn/usn-2458-3/ ** Changed in: firefox (Ubuntu) Status: New = Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1419934 Title: Please

[Desktop-packages] [Bug 1415492] Re: Create a trusted socket for privileged processes

2015-02-05 Thread Jamie Strandboge
= Fix Committed ** Changed in: apparmor-easyprof-ubuntu (Ubuntu RTM) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to signon in Ubuntu. https://bugs.launchpad.net/bugs/1415492

[Desktop-packages] [Bug 1415492] Re: Create a trusted socket for privileged processes

2015-01-28 Thread Jamie Strandboge
** Description changed: We want to let privileged processes (such as those using the unconfined profile template) to access any online account without having the need of being added to the account's ACL. signond and libsignon-qt already support connecting via a p2p D-Bus backed by a

[Desktop-packages] [Bug 1415492] Re: Create a trusted socket for privileged processes

2015-01-28 Thread Jamie Strandboge
** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: New = Fix Committed ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed

[Desktop-packages] [Bug 1413313] Re: apparmor denied messages in log, may be responsible for not printing anymore

2015-01-21 Thread Jamie Strandboge
/etc/apparmor.d/usr.sbin.cupsd should have this line: profile third_party { changed to: profile third_party flags=(attach_disconnected) { Once that is done, then the fix for bug #1413232 will need to be applied to apparmor for this to be fixed. -- You received this bug notification because

[Desktop-packages] [Bug 1413313] Re: apparmor denied messages in log, may be responsible for not printing anymore

2015-01-21 Thread Jamie Strandboge
** Tags added: aa-kernel aa-policy apparmor -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1413313 Title: apparmor denied messages in log, may be responsible for not printing anymore

[Desktop-packages] [Bug 1314160] Re: Apparmor profile violated: cupsd does mknod on /var/cache/samba/gencache.tdb

2015-01-15 Thread Jamie Strandboge
Does adding the following to /etc/apparmor.d/local/usr.sbin.cupsd fix the issue: #include abstractions/samba After making this change please do 'sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd' (or reboot) and try again. ** Changed in: cups (Ubuntu) Status: Triaged = Incomplete --

[Desktop-packages] [Bug 1314160] Re: Apparmor profile violated: cupsd does mknod on /var/cache/samba/gencache.tdb

2015-01-15 Thread Jamie Strandboge
'c' corresponds to creat(). This requires the 'w' apparmor permission. ** Tags added: aa-policy apparmor -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1314160 Title: Apparmor profile

[Desktop-packages] [Bug 1393090] Re: Apparmor errors on login

2014-12-23 Thread Jamie Strandboge
Thank you for using Ubuntu and reporting a bug. These are not errors but instead normal messages saying that the profiles are being loaded. ** Changed in: cups (Ubuntu) Status: Confirmed = Invalid -- You received this bug notification because you are a member of Desktop Packages, which

[Desktop-packages] [Bug 1365020] Re: option subject-match not working

2014-12-19 Thread Jamie Strandboge
Assigning to Mathieu for the moment-- Mathieu, do you know what this might be? ** Changed in: network-manager (Ubuntu) Status: New = Incomplete ** Changed in: network-manager (Ubuntu) Assignee: (unassigned) = Mathieu Trudel-Lapierre (mathieu-tl) -- You received this bug

[Desktop-packages] [Bug 1395280] Re: [HP Compaq 6735s (FU423ET), Analog Devices AD1984A, Black Other, Internal] No sound at all

2014-11-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to alsa-driver in Ubuntu. https://bugs.launchpad.net/bugs/1395280 Title: [HP Compaq 6735s (FU423ET), Analog Devices AD1984A,

[Desktop-packages] [Bug 1393852] Re: No password prompt is given after locking the screen

2014-11-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1393852 Title: No password prompt is given after locking the screen Status

[Desktop-packages] [Bug 1395281] Re: [HP Compaq 6735s (FU423ET), Analog Devices AD1984A, Black Other, Internal] No sound at all

2014-11-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to alsa-driver in Ubuntu. https://bugs.launchpad.net/bugs/1395281 Title: [HP Compaq 6735s (FU423ET), Analog Devices AD1984A,

[Desktop-packages] [Bug 1395532] Re: My mouse doesn't work

2014-11-24 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1395532 Title: My mouse doesn't work Status in “xorg” package in Ubuntu:

[Desktop-packages] [Bug 1392380] Re: OA gives out all tokens to any app

2014-11-18 Thread Jamie Strandboge
** Tags added: application-confinement -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to signon in Ubuntu. https://bugs.launchpad.net/bugs/1392380 Title: OA gives out all tokens to any app Status in “signon” package in Ubuntu:

[Desktop-packages] [Bug 1393206] Re: SD/mmc card with exFAT fs not automatically mounted since upgrade to utopic

2014-11-17 Thread Jamie Strandboge
The policy in question is shipped in the lightdm profile, but the reporter did not mention this as a problem with the guest session specifically. I would be surprised if this ever worked in the guest session. luca, are you trying to access the SD card from the guest session or from a normal login

[Desktop-packages] [Bug 1392380] Re: OA gives out all tokens to any app

2014-11-14 Thread Jamie Strandboge
Adding rtm14 ota-1 touch-2014-11-27. This needs to be fixed for RTM branch when bug #1376445 is fixed, but bug #1376445 is targeted for ota-1. ** Also affects: signon (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: signon (Ubuntu Vivid) Importance: Critical

[Desktop-packages] [Bug 1227824] Re: please add trust-store integration to e-d-s for calendar API

2014-11-03 Thread Jamie Strandboge
** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evolution-data-server in Ubuntu. https://bugs.launchpad.net/bugs/1227824 Title: please add trust-store

[Desktop-packages] [Bug 1383512] Re: SSL 3.0 is vulnerable, browser should not use

2014-10-31 Thread Jamie Strandboge
Thank you for using Ubuntu and filing a bug. I'm going to mark this bug as Won't Fix because we don't want to disable SSLv3 before upstream and the rest of the internet. As mentioned, this change is planned and will happen with new upstream security update releases. ** Changed in:

[Desktop-packages] [Bug 1383519] Re: SSL 3.0 is vulnerable, browser should not use

2014-10-31 Thread Jamie Strandboge
Thank you for using Ubuntu and filing a bug. I am going to mark this as Won't Fix for now since we don't want to disable SSLv3 ahead of upstream of the rest of the internet. Firefox plans to disable SSLv3 by default soon, so this update will happen when the new upstream release is pushed to

[Desktop-packages] [Bug 1386014] Re: travou

2014-10-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1386014 Title: travou Status in “xorg” package in Ubuntu: New Bug

[Desktop-packages] [Bug 1387789] Re: no messages being received

2014-10-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evolution in Ubuntu. https://bugs.launchpad.net/bugs/1387789 Title: no messages being received Status in “evolution” package

[Desktop-packages] [Bug 1387489] Re: Facebook and youtube apps are not working in ubuntu 14.1

2014-10-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to compiz in Ubuntu. https://bugs.launchpad.net/bugs/1387489 Title: Facebook and youtube apps are not working in ubuntu 14.1

[Desktop-packages] [Bug 1387712] Re: start up error

2014-10-31 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1387712 Title: start up error Status in “xorg” package in Ubuntu: New Bug

[Desktop-packages] [Bug 1386311] Re: update pidgin 2.10.10-1

2014-10-31 Thread Jamie Strandboge
This was fixed in http://www.ubuntu.com/usn/usn-2390-1/ ** Changed in: pidgin (Ubuntu) Status: New = Fix Released ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed

[Desktop-packages] [Bug 1224756] Re: Pulseaudio should integrate with trust-store

2014-10-30 Thread Jamie Strandboge
I understand the desire to push this to ota and also understand that people are busy, but I want to restate how important this bug fix is-- users need to know if an application is able to record them, otherwise it is all to easy to end up with eavesdropping applications in the store. I am not

[Desktop-packages] [Bug 1379368] Re: AppArmor policy denials in CUPS

2014-10-16 Thread Jamie Strandboge
** Tags added: apparmor ** Changed in: cups (Ubuntu) Status: New = Triaged ** Changed in: cups (Ubuntu) Importance: Undecided = Medium ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Package changed: cups (Ubuntu) = cups-filters (Ubuntu

[Desktop-packages] [Bug 1382042] Re: network usb printer always in use on kubuntu 14.10

2014-10-16 Thread Jamie Strandboge
) Status: New = In Progress ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1382042 Title

[Desktop-packages] [Bug 1382042] Re: network usb printer always in use on kubuntu 14.10

2014-10-16 Thread Jamie Strandboge
Oops, I meant: unix peer=(label=/usr/sbin/cupsd//third_party), -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1382042 Title: network usb printer always in use on kubuntu 14.10 Status

[Desktop-packages] [Bug 1190865] Re: apparmor denies the creation of directory

2014-10-14 Thread Jamie Strandboge
** Changed in: telepathy-mission-control-5 (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = (unassigned) ** Changed in: telepathy-mission-control-5 (Ubuntu) Status: Incomplete = New -- You received this bug notification because you are a member of Desktop Packages, which

[Desktop-packages] [Bug 1090008] Re: Apparmor denies telepathy to load libraries due to wrong profile

2014-10-14 Thread Jamie Strandboge
Cosing due to lack of response. ** Changed in: telepathy-mission-control-5 (Ubuntu) Status: Incomplete = Invalid ** Changed in: telepathy-mission-control-5 (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = (unassigned) -- You received this bug notification because you are a member

[Desktop-packages] [Bug 1231778] Re: wifi not working on Saucy Salamander

2014-10-10 Thread Jamie Strandboge
** Changed in: apparmor Milestone: None = 2.9.0 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1231778 Title: wifi not working on Saucy Salamander Status in Enablement

[Desktop-packages] [Bug 1284507] Re: apparmor profile for libreoffice

2014-10-09 Thread Jamie Strandboge
** Tags added: apparmor ** Tags added: policy ** No longer affects: apparmor (Ubuntu) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libreoffice in Ubuntu. https://bugs.launchpad.net/bugs/1284507 Title: apparmor profile for

[Desktop-packages] [Bug 1293525] Re: add apparmor profile for transmission-gtk

2014-10-09 Thread Jamie Strandboge
This should be submitted to the apparmor mailing list for inclusion in the apparmor-profiles repository. See http://wiki.apparmor.net/index.php/Profiles#How_to_contribute_AppArmor_profiles for details. ** Changed in: apparmor (Ubuntu) Status: Confirmed = Incomplete -- You received this

[Desktop-packages] [Bug 1252904] Re: Move chromium-browser apparmor profile from apparmor package to c-b

2014-10-09 Thread Jamie Strandboge
** Tags added: aa-policy -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1252904 Title: Move chromium-browser apparmor profile from apparmor package to c-b Status in

[Desktop-packages] [Bug 1293525] Re: add apparmor profile for transmission-gtk

2014-10-09 Thread Jamie Strandboge
** Tags added: aa-policy ** Changed in: apparmor (Ubuntu) Importance: Undecided = Low ** Changed in: transmission (Ubuntu) Importance: Undecided = Low -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to transmission in Ubuntu.

[Desktop-packages] [Bug 1293525] Re: add apparmor profile for transmission-gtk

2014-10-09 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu) Importance: Low = Wishlist ** Changed in: transmission (Ubuntu) Importance: Low = Wishlist -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to transmission in Ubuntu.

[Desktop-packages] [Bug 1208988] Re: AppArmor no longer mediates access to path-based AF_UNIX socket files

2014-10-08 Thread Jamie Strandboge
Marking the apparmor task as 'fixed' since this is available in the upstream beta tarballs. ** Changed in: apparmor Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu.

[Desktop-packages] [Bug 1211380] Re: pulseaudio socket needs confined app restrictions

2014-10-08 Thread Jamie Strandboge
Closing trusty task ** Changed in: pulseaudio (Ubuntu Trusty) Status: Confirmed = Won't Fix -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pulseaudio in Ubuntu. https://bugs.launchpad.net/bugs/1211380 Title: pulseaudio socket

[Desktop-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-06 Thread Jamie Strandboge
Christian, yes, add this to your profile (in the cups-pdf section): /run/samba/winbindd/pipe rw, then do this: $ sudo apparmor_parser -r /etc/apparmor.d/usr.sbin.cupsd -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu.

[Desktop-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-06 Thread Jamie Strandboge
Can you perform the above and confirm if it fixes it for you? Also, the cups-pdf policy has: #include abstractions/nameservice and /etc/apparmor.d/abstractions/nameservice has: #include abstractions/winbind and /etc/apparmor.d/abstractions/winbind has:

[Desktop-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-03 Thread Jamie Strandboge
Can you paste the output of: $ grep DEN /var/log/syslog at the time of the denial? ** Package changed: cups-pdf (Ubuntu) = cups (Ubuntu) ** Changed in: cups (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Desktop Packages, which is

[Desktop-packages] [Bug 1358340] Re: [Indicators] Complete greeter profiles

2014-10-02 Thread Jamie Strandboge
That sounds quite reasonable. Thanks for the update. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gsettings-ubuntu-touch-schemas in Ubuntu. https://bugs.launchpad.net/bugs/1358340 Title: [Indicators] Complete greeter profiles

[Desktop-packages] [Bug 1376611] Re: AppArmor: cupsd not allowed to send signals to third_party

2014-10-02 Thread Jamie Strandboge
Didier, sure. Actually, I already took a todo to do just this but wanted to think about the fact that Debian doesn't support the signal rule and how to best handle it before submitting. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to

[Desktop-packages] [Bug 1376611] Re: AppArmor: cupsd not allowed to send signals to third_party

2014-10-02 Thread Jamie Strandboge
Thanks for the report. I'll get this fixed soon. ** Changed in: cups (Ubuntu) Status: New = In Progress ** Changed in: cups (Ubuntu) Importance: Undecided = High ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug

[Desktop-packages] [Bug 1373070] Re: full fix for disconnected path (paths)

2014-10-02 Thread Jamie Strandboge
Here is another: Sep 10 09:06:00 callisto kernel: audit: type=1400 audit(1410332760.203:112): apparmor=DENIED operation=connect info=Failed name lookup - disconnected path error=-13 profile=/usr/sbin/cupsd name=run/dbus/system_bus_socket pid=3608 comm=cupsd requested_mask=rw denied_mask=rw

[Desktop-packages] [Bug 1367609] Re: AppArmor: Prevents connection to system dbus (disconnected path)

2014-10-02 Thread Jamie Strandboge
*** This bug is a duplicate of bug 1373070 *** https://bugs.launchpad.net/bugs/1373070 ** This bug has been marked a duplicate of bug 1373070 full fix for disconnected path (paths) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to

[Desktop-packages] [Bug 1373070] Re: full fix for disconnected path (paths)

2014-10-02 Thread Jamie Strandboge
I'm going to need to add attach_disconnected to the cups profile as a temporary workaround. When this bug is fixed, we need to undo that. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu.

[Desktop-packages] [Bug 1373070] Re: full fix for disconnected path (paths)

2014-10-02 Thread Jamie Strandboge
** Changed in: cups (Ubuntu) Status: New = In Progress ** Changed in: cups (Ubuntu) Importance: Undecided = High ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages

[Desktop-packages] [Bug 1376411] Re: Firefox profile resulting in ptrace read denials

2014-10-01 Thread Jamie Strandboge
** Tags added: apparmor ** Package changed: apparmor (Ubuntu) = firefox (Ubuntu) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to firefox in Ubuntu. https://bugs.launchpad.net/bugs/1376411 Title: Firefox profile resulting in ptrace

[Desktop-packages] [Bug 1358340] Re: [Indicators] Complete greeter profiles

2014-09-30 Thread Jamie Strandboge
So I'm interpreting this as Messages on Welcome Screen is related to the data being shown on the welcome screen. Where the messages and notification settings is a Unity setting which just blocks the whole panel. I'm confused by this comment. The information presented in the inforgraphics/welcome

[Desktop-packages] [Bug 1366380] Re: telepathy-mission-control is trying to open weird files on startup

2014-09-29 Thread Jamie Strandboge
Thank you for using Ubuntu and filing a bug. $ aa-decode 2F6D656469612F53746F726167652F50726F66696C652F5562756E74752031342E30342F6C6F6F7374726F2F2E6C6F63616C2F73686172652F74656C6570617468792F6D697373696F6E2D636F6E74726F6C2F6163636F756E74732E636667 Decoded: /media/Storage/Profile/Ubuntu

[Desktop-packages] [Bug 1375249] Re: telepathy-ofono tries to open /proc/1728/fd/ and is DENIED access by apparmor

2014-09-29 Thread Jamie Strandboge
telepathy-ofono is trying to start pulseaudio via a fork/exec for some reason, but it should not be. I'm not comfortable letting telepathy- ofono start pulseaudio because pulseaudio should be started by the session, not by individual services. Seems like the upstart jobs need to be adjusted so

[Desktop-packages] [Bug 1375249] Re: telepathy-ofono tries to open /proc/1728/fd/ and is DENIED access by apparmor

2014-09-29 Thread Jamie Strandboge
Adding the rtm14 tag-- this needs to be fixed there and marking High as I believe this could be performed as ota, but the issue needs to be investigated (ie, I don't know if the dialer works properly when this bug happens). -- You received this bug notification because you are a member of

[Desktop-packages] [Bug 1346868] Re: Canon MX310 printer hangs when printing LibreOffice Writer doc

2014-09-29 Thread Jamie Strandboge
** Tags removed: apparmor -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1346868 Title: Canon MX310 printer hangs when printing LibreOffice Writer doc Status in “cups” package in

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-24 Thread Jamie Strandboge
** Changed in: cups (Ubuntu) Status: Confirmed = In Progress ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Changed in: cups (Ubuntu) Importance: Undecided = High -- You received this bug notification because you are a member of Desktop

[Desktop-packages] [Bug 1371097] Re: cupsd is not allowed to access /var/cache/samba/gencache.tdb by apparmor

2014-09-24 Thread Jamie Strandboge
** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Changed in: cups (Ubuntu) Status: Triaged = In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-24 Thread Jamie Strandboge
Sigh, that's what I get for typing too fast. Debian does not support dbus, signal, ptrace or unix rules -- all of these should be excluded in Debian and included in Ubuntu. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu.

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-24 Thread Jamie Strandboge
I'm preparing an update for this now that implements the above. Note, I do not have a third party printer so it is possible more fine tuning will need to be done. Also note, the 'unix' rule will not work on Debian-- it will need to be conditionally applied to Ubuntu until the unix mediation is

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-24 Thread Jamie Strandboge
Sorry, I meant the 'signal' rule instead of 'unix'. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1370930 Title: apparmor cups samba problem no printing Status in “cups” package in

[Desktop-packages] [Bug 1371097] Re: cupsd is not allowed to access /var/cache/samba/gencache.tdb by apparmor

2014-09-24 Thread Jamie Strandboge
** Changed in: cups (Ubuntu) Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1371097 Title: cupsd is not allowed to access

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-24 Thread Jamie Strandboge
** Changed in: cups (Ubuntu) Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1370930 Title: apparmor cups samba problem no printing Status in

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-19 Thread Jamie Strandboge
Since 14.04, apparmor has signal mediation. Cups is trying to kill some processes. To obtain 13.10 behavior, you could add this to usr.sbin.cupsd: signal, However, this would obviously allow cups to send signals to anything. I'm guessing it is sending signals to third party backends. It would

[Desktop-packages] [Bug 1370930] Re: apparmor cups samba problem no printing

2014-09-19 Thread Jamie Strandboge
Actually, I see more Ux rules. Try this instead (also untested): /usr/bin/hpijs Cx - third_party, /usr/Brother/** Cx - third_party, /usr/lib/cups/backend/* Cx - third_party, /usr/lib/cups/filter/** Cxr - third_party,

[Desktop-packages] [Bug 870373] Re: guest session will not open

2014-09-18 Thread Jamie Strandboge
Marking this as fixed. The user said a reinstall fixed it and the guest session has been working fine for a long time. Please file a new bug if you are still having issues. ** Changed in: lightdm (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you

[Desktop-packages] [Bug 1361372] Re: Apparmor stopping Google Chrome from launching in guest session

2014-09-18 Thread Jamie Strandboge
** Changed in: lightdm (Ubuntu) Status: New = In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1361372 Title: Apparmor stopping Google Chrome from launching in guest

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-18 Thread Jamie Strandboge
** Also affects: linux-mako (Ubuntu) Importance: Undecided Status: New ** Also affects: linux-goldfish (Ubuntu) Importance: Undecided Status: New ** Also affects: linux-flo (Ubuntu) Importance: Undecided Status: New ** Also affects: linux-manta (Ubuntu)

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-17 Thread Jamie Strandboge
** Changed in: linux (Ubuntu) Importance: Undecided = Critical ** Changed in: linux (Ubuntu) Importance: Critical = High -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1362199

[Desktop-packages] [Bug 1369391] Re: package nvidia-331 331.89-0ubuntu4 failed to install/upgrade: subprocess installed post-removal script returned error exit status 8

2014-09-15 Thread Jamie Strandboge
*** This bug is a duplicate of bug 1369398 *** https://bugs.launchpad.net/bugs/1369398 ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to nvidia-graphics-drivers-331 in

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-08 Thread Jamie Strandboge
** Description changed: Background: kernel and apparmor userspace updates to support abstract, anonymous and fine-grained netlink socket mediation. These packages are listed in one bug because they are related, but the FFes may be granted and the uploads may happen at different times. +

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-08 Thread Jamie Strandboge
** Description changed: Background: kernel and apparmor userspace updates to support abstract, anonymous and fine-grained netlink socket mediation. These packages are listed in one bug because they are related, but the FFes may be granted and the uploads may happen at different times.

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-08 Thread Jamie Strandboge
1) old kernel and new userspace - this is well tested and ready to land now 2) new kernel and old userspace 3) new kernel and new userspace - these are tested, but need more testing on the kernel side. We are finalizing the kernel and will have these in place for kernel pull requests Ah, I did

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-08 Thread Jamie Strandboge
FYI, when booting new userspace with old kernel, the parser will output something like this: Warning from profile /usr/lib/telepathy/telepathy-ofono (/etc/apparmor.d/usr.lib.telepathy): downgrading extended network unix socket rule to generic network rule -- You received this bug notification

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-05 Thread Jamie Strandboge
** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Importance: Undecided = Critical ** Changed in: apparmor (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-05 Thread Jamie Strandboge
isc-dhcp (4.2.4-7ubuntu14) utopic; urgency=medium * debian/apparmor-profile.dhclient: add file_inherit inet{,6} dgram rules for child profiles ** Changed in: isc-dhcp (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-04 Thread Jamie Strandboge
** Description changed: Background: kernel and apparmor userspace updates to support abstract, anonymous and fine-grained netlink socket mediation. These packages are listed in one bug because they are related, but the FFes may be granted and the uploads may happen at different times.

[Desktop-packages] [Bug 1365336] Re: Lightdm update=No desktop

2014-09-04 Thread Jamie Strandboge
Downgrading to lightdm 1.11.7 solves the issue for me. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1365336 Title: Lightdm update=No desktop Status in “lightdm” package in Ubuntu:

[Desktop-packages] [Bug 1365336] Re: Lightdm update=No desktop

2014-09-04 Thread Jamie Strandboge
FYI I see this in a utopic amd64 qemu VM. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1365336 Title: Lightdm update=No desktop Status in “lightdm” package in Ubuntu: Confirmed

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-04 Thread Jamie Strandboge
** Tags added: rtm14 touch-2014-09-11 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1362199 Title: [FFe] apparmor abstract, anonymous and netlink socket mediation Status in

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-02 Thread Jamie Strandboge
** No longer affects: cups (Ubuntu) ** No longer affects: cups-filters (Ubuntu) ** Changed in: linux (Ubuntu) Assignee: (unassigned) = John Johansen (jjohansen) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups-filters in

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-09-02 Thread Jamie Strandboge
** Also affects: tlsdate (Ubuntu) Importance: Undecided Status: New ** Changed in: tlsdate (Ubuntu) Status: New = In Progress ** Changed in: tlsdate (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you

[Desktop-packages] [Bug 1298021] Re: Google Chrome (not chromium) won't start in guest session

2014-08-27 Thread Jamie Strandboge
This will be fixed in the next lightdm upload. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1298021 Title: Google Chrome (not chromium) won't start in guest session Status in

[Desktop-packages] [Bug 1362199] [NEW] [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-08-27 Thread Jamie Strandboge
en masse via a silo ppa. ** Affects: apparmor (Ubuntu) Importance: Critical Status: In Progress ** Affects: apparmor-easyprof-ubuntu (Ubuntu) Importance: Undecided Assignee: Jamie Strandboge (jdstrand) Status: In Progress ** Affects: isc-dhcp (Ubuntu

[Desktop-packages] [Bug 1362199] Re: [FFe] apparmor abstract, anonymous and netlink socket mediation

2014-08-27 Thread Jamie Strandboge
** Changed in: linux (Ubuntu) Status: Incomplete = In Progress ** Changed in: cups (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) ** Changed in: cups-filters (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because

[Desktop-packages] [Bug 1359615] Re: [precise] critical: flash stopped working after last update

2014-08-21 Thread Jamie Strandboge
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1359615 Title: [precise] critical: flash stopped working

[Desktop-packages] [Bug 1230091] Re: [enhancement] Trusted Session surface management (required for appstore app trust model), modal subwindows

2014-08-20 Thread Jamie Strandboge
I didn't here back on the bug, however, online accounts and trust-store now have sufficient Mir support to utilize trust sessions, and we can therefore remove the rtm14 tag and likely reduce the severity. I will take care of the Ubuntu tasks. ** Tags removed: application-confinement rtm14 ** No

[Desktop-packages] [Bug 1308488] Re: apparmor messages when opening pdfs attached to mail

2014-08-13 Thread Jamie Strandboge
No it wasn't, sorry. Uploading the proper policy now. Thanks! ** Changed in: evince (Ubuntu) Status: Fix Released = In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu.

[Desktop-packages] [Bug 1355804] Re: Evince apparmor settings not allowing sitewide dconf changes

2014-08-12 Thread Jamie Strandboge
** Changed in: evince (Ubuntu) Status: New = In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu. https://bugs.launchpad.net/bugs/1355804 Title: Evince apparmor settings not allowing sitewide dconf

[Desktop-packages] [Bug 1000802] Re: Unable to open external email address link to Thunderbird

2014-08-12 Thread Jamie Strandboge
/etc/apparmor.d/usr.bin.evince uses the ubuntu-email abstraction which includes policy to start thunderbird and has since before 12.04. Can you attach your /etc/apparmor.d/usr.bin.evince? ** Changed in: evince (Ubuntu) Status: Confirmed = Incomplete -- You received this bug notification

[Desktop-packages] [Bug 1229066] Re: evince-thumbnailer can't run mktexpk

2014-08-12 Thread Jamie Strandboge
** Package changed: evince (Ubuntu) = apparmor (Ubuntu) ** Changed in: apparmor (Ubuntu) Status: Confirmed = Triaged -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu. https://bugs.launchpad.net/bugs/1229066

[Desktop-packages] [Bug 1096837] Re: [apparmor] Evince does not save files to external disks unless I rename them with the .pdf extension

2014-08-12 Thread Jamie Strandboge
** Changed in: evince (Ubuntu) Status: Triaged = In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu. https://bugs.launchpad.net/bugs/1096837 Title: [apparmor] Evince does not save files to external

[Desktop-packages] [Bug 1330430] Re: apparmor profile needs review/improvement

2014-08-12 Thread Jamie Strandboge
*** This bug is a duplicate of bug 1096837 *** https://bugs.launchpad.net/bugs/1096837 ** This bug has been marked a duplicate of bug 1096837 [apparmor] Evince does not save files to external disks unless I rename them with the .pdf extension -- You received this bug notification

[Desktop-packages] [Bug 1032812] Re: evince crashes when trying to display print dialog when tmpdir is not writable

2014-08-12 Thread Jamie Strandboge
** Summary changed: - evince crashes on invoking print dialog + evince crashes when trying to display print dialog when tmpdir is not writable ** Tags removed: apparmor -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu.

[Desktop-packages] [Bug 1290157] Re: evince: show containing folder not working under Lubuntu 14.04

2014-08-12 Thread Jamie Strandboge
** Changed in: evince (Ubuntu) Status: Confirmed = In Progress -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to evince in Ubuntu. https://bugs.launchpad.net/bugs/1290157 Title: evince: show containing folder not working under

<    1   2   3   4   5   6   7   8   9   10   >