** Changed in: ubuntu-system-settings-online-accounts
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1468792
** Also affects: canonical-devices-system-image
Importance: Undecided
Status: New
** Changed in: canonical-devices-system-image
Importance: Undecided = Critical
** Changed in: canonical-devices-system-image
Status: New = Fix Released
** Changed in:
FYI:
09:18 rvr jdstrand: Hi, I'm testing silo 11 and I found some issues with
apparmor
09:18 rvr jdstrand: http://paste.ubuntu.com/11887897/
09:19 rvr jdstrand: The popup is stuck loading the login page
09:19 rvr jdstrand: During installation, I downgraded to
FYI:
10:35 jdstrand rvr: can you do: 'mkdir -p
/home/phablet/.cache/QML/Apps/online-accounts-ui/' then ttry again?
10:35 rvr jdstrand: Sure
10:38 rvr jdstrand: Jul 16 15:37:30 ubuntu-phablet kernel:
[52.552819]type=1400 audit(1437061050.590:131): apparmor=DENIED
operation=mknod
I should also mention that apparmor-easyprof-ubuntu 1.3.12 (and now
1.3.13) is in stable-phone-overlay and has the fixes in comment #10 and
#11.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in
This bug was fixed in the package ubuntu-system-settings-online-accounts
- 0.6+15.10.20150715-0ubuntu1
---
ubuntu-system-settings-online-accounts (0.6+15.10.20150715-0ubuntu1) wily;
urgency=medium
[ Alberto Mardegan ]
* Inject the APP_ID into the child process's environment.
The reason why the loading page stays forever is probably this:
LaunchProcess: failed to execvp:
/usr/lib/arm-linux-gnueabihf/oxide-qt/chrome-sandbox
I'll check if some other rules are missing.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages,
Jun 26 12:31:44 ubuntu-phablet kernel: [49381.194192] type=1400
audit(1435311104.982:863): apparmor=DENIED operation=open
profile=com.ubuntu.developer.rmescandon.asana_account-plugin_1.0.0
name=/dev/tty pid=1914 comm=QQmlThread requested_mask=r
denied_mask=r fsuid=32011 ouid=0
This won't be
This bug was fixed in the package click-reviewers-tools - 0.30
---
click-reviewers-tools (0.30) wily; urgency=medium
* cr_security.py: verify required and allowed policy groups with the
ubuntu-account-plugin template (LP: #1468792)
* cr_systemd.py: whitespace pep8 fixes for
** Branch linked: lp:ubuntu/wily-proposed/click-reviewers-tools
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1468792
Title:
various apparmor denials
This bug was fixed in the package apparmor-easyprof-ubuntu - 15.10.5
---
apparmor-easyprof-ubuntu (15.10.5) wily; urgency=medium
* ubuntu/ubuntu-account-plugin (LP: #1468792):
- allow access to QML cache
- explicitly deny access to /proc/[0-9]*/mounts and
I uploaded apparmor-easyprof-ubuntu with just the ubuntu/ubuntu-account-
plugin change to silo ubuntu-011 for vivid only (since I uploaded wily
to the archive). Please see additional testing notes in the citrain
spreadsheet (just a couple small things).
IMPORTANT: we should *not* include the
** Branch linked: lp:ubuntu/apparmor-easyprof-ubuntu
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1468792
Title:
various apparmor denials when using
There are still some warnings from apparmor, which appear to be
harmless, though (maybe the audio policy group is missing?). See the
attached file.
** Attachment added: Apparmor denials
BTW, it's my impression that the QML cache errors are not critical, and
that the application would work even without any changes on our side, if
the author added the networking and webview policy groups.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
So, with the fix for Online Accounts in the linked branch, save the attached
file as
/var/lib/apparmor/profiles/click_com.ubuntu.developer.rmescandon.asana_account-plugin_1.0.0
and then run
cd /var/lib/apparmor/profiles
sudo apparmor_parser -r
** Changed in: ubuntu-system-settings-online-accounts
Status: New = In Progress
** Changed in: ubuntu-system-settings-online-accounts
Importance: Undecided = Critical
** Changed in: ubuntu-system-settings-online-accounts
Assignee: (unassigned) = Alberto Mardegan (mardy)
--
You
Adding a click-reviewers-tools task to ensure accounts, networking and
webview are all specified when using the ubuntu-account-plugin template.
** Also affects: click-reviewers-tools (Ubuntu)
Importance: Undecided
Status: New
** Changed in: click-reviewers-tools (Ubuntu)
Status:
Note, this is affecting the asana app:
https://myapps.developer.ubuntu.com/dev/click-apps/2893/feedback/. This
should be part of the next OTA. Also, if apparmor-easyprof-ubuntu needs
to have the ubuntu-account-plugin template updated, this would be ok to
do as part of OTA, because this template is
Adding an apparmor-easyprof-ubuntu task for now, but depending on what
Alberto finds, it may not need a fix.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
20 matches
Mail list logo