*** This bug is a duplicate of bug 1447311 ***
https://bugs.launchpad.net/bugs/1447311
Public bug reported:
Testing oxide 1.9.1 on arale, I created a simple click package that
simply launches qmlview with the following bit of QML:
import QtQuick 2.4
import com.canonical.Oxide 1.9
WebView {
url: "http://example.org";
}
The manifest for the app has policy groups "networking" and "webview",
and the policy version is 1.3.
When I launch the app, it fails to start, and the app’s log is the
following:
[0910/101904:FATAL:zygote_host_impl_linux.cc(182)] Check failed:
process.IsValid(). Failed to launch zygote process
Looking into /var/log/syslog, I’m seeing the following denial:
Sep 10 10:19:28 ubuntu-phablet kernel: [ 320.255767] type=1400
audit(1441873168.850:197): apparmor="DENIED" operation="capable"
profile="testwebview.osomon_testwebview_0.1" pid=4281 comm="qmlscene"
capability=21 capname="sys_admin"
** Affects: oxide
Importance: Undecided
Status: New
** Affects: apparmor-easyprof-ubuntu (Ubuntu)
Importance: Undecided
Status: New
** Also affects: apparmor-easyprof-ubuntu (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to Oxide.
https://bugs.launchpad.net/bugs/1494176
Title:
apparmor confined applications with a WebView get a denial for
sys_admin capability
Status in Oxide:
New
Status in apparmor-easyprof-ubuntu package in Ubuntu:
New
Bug description:
Testing oxide 1.9.1 on arale, I created a simple click package that
simply launches qmlview with the following bit of QML:
import QtQuick 2.4
import com.canonical.Oxide 1.9
WebView {
url: "http://example.org";
}
The manifest for the app has policy groups "networking" and "webview",
and the policy version is 1.3.
When I launch the app, it fails to start, and the app’s log is the
following:
[0910/101904:FATAL:zygote_host_impl_linux.cc(182)] Check failed:
process.IsValid(). Failed to launch zygote process
Looking into /var/log/syslog, I’m seeing the following denial:
Sep 10 10:19:28 ubuntu-phablet kernel: [ 320.255767] type=1400
audit(1441873168.850:197): apparmor="DENIED" operation="capable"
profile="testwebview.osomon_testwebview_0.1" pid=4281 comm="qmlscene"
capability=21 capname="sys_admin"
To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1494176/+subscriptions
--
Mailing list: https://launchpad.net/~ubuntu-webapps-bugs
Post to : ubuntu-webapps-bugs@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-webapps-bugs
More help : https://help.launchpad.net/ListHelp
