Public bug reported:
libc: It's hard to find an application that dosn't read ld.so.preload,
so all apparmor profiles should define it.
WebGL is calling DRI on my system and that means reading drirc.
Thanks!
diff -u -r1.1 /etc/apparmor.d/usr.bin.firefox
--- /etc/apparmor.d/usr.bin.firefox 2012/01/19 19:49:40 1.1
+++ /etc/apparmor.d/usr.bin.firefox 2012/01/19 19:51:49
@@ -62,6 +62,7 @@
deny /boot/vmlinuz* r,
deny /var/cache/fontconfig/ w,
deny @{HOME}/.local/share/recently-used.xbel r,
+ deny /etc/ld.so.preload r,
# TODO: investigate
deny /usr/bin/gconftool-2 x,
@@ -138,6 +139,7 @@
/usr/bin/mkfifo Uxr, # TODO: investigate
/bin/ps Uxr, # TODO: child profile
/bin/uname Uxr, # TODO: child profile
+ /etc/drirc r,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.bin.firefox>
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: firefox 10.0~b2+build1-0ubuntu1
ProcVersionSignature: Ubuntu 3.0-2.3-generic-pae 3.0.0-rc4
Uname: Linux 3.0-2-generic-pae i686
AddonCompatCheckDisabled: False
AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24.
ApportVersion: 1.90-0ubuntu1
Architecture: i386
ArecordDevices:
**** List of CAPTURE Hardware Devices ****
card 0: SB [HDA ATI SB], device 0: VT2020 Analog [VT2020 Analog]
Subdevices: 2/2
Subdevice #0: subdevice #0
Subdevice #1: subdevice #1
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path',
'/dev/snd/controlC1', '/dev/snd/hwC1D0', '/dev/snd/pcmC1D3p',
'/dev/snd/controlC0', '/dev/snd/hwC0D0', '/dev/snd/pcmC0D0c',
'/dev/snd/pcmC0D0p', '/dev/snd/pcmC0D1p', '/dev/snd/seq', '/dev/snd/timer']
failed with exit code 1:
BuildID: 20120102174747
CRDA: Error: [Errno 2] No such file or directory
Card0.Amixer.info:
Card hw:0 'SB'/'HDA ATI SB at 0xfe3f8000 irq 16'
Mixer name : 'VIA VT2020'
Components : 'HDA:11060441,104383e4,00100100'
Controls : 33
Simple ctrls : 19
Card1.Amixer.info:
Card hw:1 'HDMI'/'HDA ATI HDMI at 0xfe9ec000 irq 88'
Mixer name : 'ATI R6xx HDMI'
Components : 'HDA:1002aa01,00aa0100,00100000'
Controls : 4
Simple ctrls : 1
Card1.Amixer.values:
Simple mixer control 'IEC958',0
Capabilities: pswitch pswitch-joined penum
Playback channels: Mono
Mono: Playback [on]
Channel: beta
Date: Thu Jan 19 13:52:18 2012
ForcedLayersAccel: False
IpRoute:
default via 192.168.172.100 dev eth2 metric 100
169.254.0.0/16 dev eth2 scope link metric 1000
192.168.172.0/24 dev eth2 proto kernel scope link src 192.168.172.26
IwConfig: Error: [Errno 2] No such file or directory
ProcEnviron:
LANGUAGE=en
PATH=(custom, no user)
LANG=C
SHELL=/bin/bash
Profiles: Profile0 (Default) - LastVersion=10.0/20120102174747
PulseSinks: Error: command ['pacmd', 'list-sinks'] failed with exit code 127:
pacmd: error while loading shared libraries:
libpulsecommon-UNKNOWN.UNKNOWN.UNKNOWN.so: cannot open shared object file: No
such file or directory
PulseSources: Error: command ['pacmd', 'list-sources'] failed with exit code
127: pacmd: error while loading shared libraries:
libpulsecommon-UNKNOWN.UNKNOWN.UNKNOWN.so: cannot open shared object file: No
such file or directory
RfKill: Error: [Errno 2] No such file or directory
RunningIncompatibleAddons: False
SourcePackage: firefox
UpgradeStatus: Upgraded to precise on 2012-01-01 (17 days ago)
WpaSupplicantLog:
dmi.bios.date: 02/17/2011
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: 1902
dmi.board.asset.tag: To Be Filled By O.E.M.
dmi.board.name: Crosshair IV Formula
dmi.board.vendor: ASUSTeK Computer INC.
dmi.board.version: Rev 1.xx
dmi.chassis.asset.tag: Asset-1234567890
dmi.chassis.type: 3
dmi.chassis.vendor: Chassis Manufacture
dmi.chassis.version: Chassis Version
dmi.modalias:
dmi:bvnAmericanMegatrendsInc.:bvr1902:bd02/17/2011:svnSystemmanufacturer:pnSystemProductName:pvrSystemVersion:rvnASUSTeKComputerINC.:rnCrosshairIVFormula:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
dmi.product.name: System Product Name
dmi.product.version: System Version
dmi.sys.vendor: System manufacturer
mtime.conffile..etc.apparmor.d.usr.bin.firefox: 2012-01-19T13:51:49.097296
** Affects: firefox (Ubuntu)
Importance: Undecided
Status: New
** Tags: apparmor apport-bug beta-channel i386 patch precise
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/918879
Title:
Firefox apparmor profile, WebGL/DRI and libc corrections.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/918879/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
