** Also affects: akonadiconsole (Ubuntu)
Importance: Undecided
Status: New
** Changed in: akonadiconsole (Ubuntu)
Status: New => Fix Released
** Changed in: akonadiconsole (Ubuntu)
Milestone: None => ubuntu-24.10
** Changed in: akonadiconsole (Ubuntu)
Assignee: (unassig
Hi Georgia,
Thanks for your help.
As for the report, sadly it was in IRC. Here is what I have.
dbus-daemon[2511]: apparmor="DENIED" operation="dbus_method_call"
bus="session" path="/org/mpris/MediaPlayer2"
interface="org.freedesktop.DBus.Properties" member="GetAll"
name=":1.4088" mask="receive" p
As per the discussion in
https://irclogs.ubuntu.com/2024/07/09/%23ubuntu-security.txt
The recommendation from the security team is to not revert to the
"flags=(unconfined)" profile if the profile is already confined. That means
that we should only fix the multiarch issue.
Scarlett, you're right
I just noticed plasmashell is also hard coded!
https://git.launchpad.net/apparmor/tree/profiles/apparmor.d/plasmashell I did
not write this profile.
We have complaints that dbus is being denied.
There is so much more going on here. I am looking at the include problem that
seems to be at the root
Hi Robie,
I followed
https://ubuntu.com/server/docs/apparmor#:~:text=Also%2C%20replace%20/path/to,process%20is%20allowed%20to%20use.
in creating my initial profiles. They worked great on AMD and then I presented
the arm bug in which I found I had hard coded the multiarch path. Oops. So I
though
Thanks. The profiles there are a bit different though - IIUC, they're
there so that people who wish to opt-in to applying AppArmor profiles
have a library to easily consult and use. There's a complication though
which is that due to a change in 24.04 it's now required to explicitly
enable "userns"
91 is just what ships with the actual apparmor package. There may be
more I assume.
In apparmor:
1password
Discord
MongoDB_Compass
QtWebEngineProcess
balena-etcher
brave
buildah
busybox
cam
ch-checkns
ch-run
chrome
code
crun
devhelp
element-desktop
epiphany
evolution
firefox
flatpak
foliate
geary
Hi Robie,
I understand now and will improve my future SRUs. I apologize for this.
I found this example of my profiles here
https://git.launchpad.net/apparmor/tree/profiles/apparmor.d/
Therre are tons of profiles using this minimal approach, so I thought it
would be ok for us to also use this appr
On Tue, Jul 09, 2024 at 11:32:33AM -, Scarlett Gately Moore wrote:
> Also, what is exceptional justification. I can't find it in the docs.
The docs say that SRUs should be minimal. Search for "this tends to be
well-correlated with minimising the size of those changes" in
https://wiki.ubuntu.co
Thanks. Could you link directly to the uploads whose pattern you're
following please?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2065915
Title:
[SRU] Fix hard coded path in apparmor profiles.
To
Also, what is exceptional justification. I can't find it in the docs.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2065915
Title:
[SRU] Fix hard coded path in apparmor profiles.
To manage notifica
Hi Robie,
Sorry I am a bit new on SRUs, so I am guessing I just should have rename the
original bug to SRU and put the SRU info on that bug? As for the complete
change rather than just the multiarch, it was due to the packages still didn't
work, so I went back to the original apparmor mega bug a
This bug was fixed in the package falkon - 24.05.1-1ubuntu2
---
falkon (24.05.1-1ubuntu2) oracular; urgency=medium
* Add missing files.
-- Scarlett Moore Mon, 08 Jul 2024 09:08:41 -0700
** Changed in: falkon (Ubuntu)
Status: Fix Committed => Fix Released
--
You receive
Thank you for working on this. I'm not doing my SRU shift but was
surprised to see so many uploads appear in the SRU queue together so
paused to take a look.
It looks like you're removing AppArmor confinement wholesale for a large
number of packages, which I think requires exceptional justificatio
This bug was fixed in the package plasma-welcome - 5.27.11-0ubuntu4
---
plasma-welcome (5.27.11-0ubuntu4) oracular; urgency=medium
* Use less restrictive apparmor, folling other applications. (LP:
#2065915)
-- Scarlett Moore Mon, 08 Jul 2024 19:26:02 +0100
** Changed in: plasma
** Changed in: plasma-welcome (Ubuntu)
Status: New => Fix Committed
** Changed in: plasma-welcome (Ubuntu)
Milestone: None => ubuntu-24.10
** Changed in: plasma-welcome (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: plasma-welcome (Ubuntu
** Changed in: marble (Ubuntu)
Status: New => Fix Released
** Changed in: marble (Ubuntu)
Milestone: None => ubuntu-24.10
** Changed in: marble (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: marble (Ubuntu Noble)
Status: New => Fix
** Changed in: kontact (Ubuntu)
Status: New => Fix Released
** Changed in: kontact (Ubuntu)
Milestone: None => ubuntu-24.10
** Changed in: kontact (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: kontact (Ubuntu Noble)
Status: New =>
** Changed in: konqueror (Ubuntu)
Status: New => Fix Released
** Changed in: konqueror (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: konqueror (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: konqueror (Ubuntu Noble)
** Changed in: kmail (Ubuntu)
Status: New => Fix Released
** Changed in: kmail (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: kmail (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: kmail (Ubuntu Noble)
Status: New =>
** Changed in: kalgebra (Ubuntu)
Status: New => Fix Released
** Changed in: kalgebra (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: kalgebra (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: kalgebra (Ubuntu Noble)
St
** Changed in: ghostwriter (Ubuntu)
Status: New => Fix Committed
** Changed in: ghostwriter (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: ghostwriter (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: ghostwriter (Ubuntu Nob
** Changed in: falkon (Ubuntu)
Status: New => Fix Committed
** Changed in: falkon (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: falkon (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: falkon (Ubuntu Noble)
Status: N
** Changed in: digikam (Ubuntu)
Status: New => Fix Released
** Changed in: digikam (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: digikam (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: digikam (Ubuntu Noble)
Status
** Changed in: cantor (Ubuntu)
Status: New => Fix Released
** Changed in: cantor (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: cantor (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: cantor (Ubuntu Noble)
Status: Ne
** Changed in: angelfish (Ubuntu)
Status: New => Fix Released
** Changed in: angelfish (Ubuntu)
Milestone: noble-updates => ubuntu-24.10
** Changed in: angelfish (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Changed in: akregator (Ubuntu)
Stat
** Changed in: akregator (Ubuntu)
Importance: Undecided => High
** Changed in: akregator (Ubuntu)
Status: New => Fix Committed
** Changed in: akregator (Ubuntu)
Assignee: (unassigned) => Scarlett Gately Moore (scarlettmoore)
** Also affects: digikam (Ubuntu Noble)
Importance: U
** Summary changed:
- SRu: Fix hard coded path in apparmor profiles.
+ [SRU] Fix hard coded path in apparmor profiles.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2065915
Title:
[SRU] Fix hard co
28 matches
Mail list logo
