Public bug reported: libc: It's hard to find an application that dosn't read ld.so.preload, so all apparmor profiles should define it.
WebGL is calling DRI on my system and that means reading drirc. Thanks! diff -u -r1.1 /etc/apparmor.d/usr.bin.firefox --- /etc/apparmor.d/usr.bin.firefox 2012/01/19 19:49:40 1.1 +++ /etc/apparmor.d/usr.bin.firefox 2012/01/19 19:51:49 @@ -62,6 +62,7 @@ deny /boot/vmlinuz* r, deny /var/cache/fontconfig/ w, deny @{HOME}/.local/share/recently-used.xbel r, + deny /etc/ld.so.preload r, # TODO: investigate deny /usr/bin/gconftool-2 x, @@ -138,6 +139,7 @@ /usr/bin/mkfifo Uxr, # TODO: investigate /bin/ps Uxr, # TODO: child profile /bin/uname Uxr, # TODO: child profile + /etc/drirc r, # Site-specific additions and overrides. See local/README for details. #include <local/usr.bin.firefox> ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: firefox 10.0~b2+build1-0ubuntu1 ProcVersionSignature: Ubuntu 3.0-2.3-generic-pae 3.0.0-rc4 Uname: Linux 3.0-2-generic-pae i686 AddonCompatCheckDisabled: False AlsaVersion: Advanced Linux Sound Architecture Driver Version 1.0.24. ApportVersion: 1.90-0ubuntu1 Architecture: i386 ArecordDevices: **** List of CAPTURE Hardware Devices **** card 0: SB [HDA ATI SB], device 0: VT2020 Analog [VT2020 Analog] Subdevices: 2/2 Subdevice #0: subdevice #0 Subdevice #1: subdevice #1 AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/by-path', '/dev/snd/controlC1', '/dev/snd/hwC1D0', '/dev/snd/pcmC1D3p', '/dev/snd/controlC0', '/dev/snd/hwC0D0', '/dev/snd/pcmC0D0c', '/dev/snd/pcmC0D0p', '/dev/snd/pcmC0D1p', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1: BuildID: 20120102174747 CRDA: Error: [Errno 2] No such file or directory Card0.Amixer.info: Card hw:0 'SB'/'HDA ATI SB at 0xfe3f8000 irq 16' Mixer name : 'VIA VT2020' Components : 'HDA:11060441,104383e4,00100100' Controls : 33 Simple ctrls : 19 Card1.Amixer.info: Card hw:1 'HDMI'/'HDA ATI HDMI at 0xfe9ec000 irq 88' Mixer name : 'ATI R6xx HDMI' Components : 'HDA:1002aa01,00aa0100,00100000' Controls : 4 Simple ctrls : 1 Card1.Amixer.values: Simple mixer control 'IEC958',0 Capabilities: pswitch pswitch-joined penum Playback channels: Mono Mono: Playback [on] Channel: beta Date: Thu Jan 19 13:52:18 2012 ForcedLayersAccel: False IpRoute: default via 192.168.172.100 dev eth2 metric 100 169.254.0.0/16 dev eth2 scope link metric 1000 192.168.172.0/24 dev eth2 proto kernel scope link src 192.168.172.26 IwConfig: Error: [Errno 2] No such file or directory ProcEnviron: LANGUAGE=en PATH=(custom, no user) LANG=C SHELL=/bin/bash Profiles: Profile0 (Default) - LastVersion=10.0/20120102174747 PulseSinks: Error: command ['pacmd', 'list-sinks'] failed with exit code 127: pacmd: error while loading shared libraries: libpulsecommon-UNKNOWN.UNKNOWN.UNKNOWN.so: cannot open shared object file: No such file or directory PulseSources: Error: command ['pacmd', 'list-sources'] failed with exit code 127: pacmd: error while loading shared libraries: libpulsecommon-UNKNOWN.UNKNOWN.UNKNOWN.so: cannot open shared object file: No such file or directory RfKill: Error: [Errno 2] No such file or directory RunningIncompatibleAddons: False SourcePackage: firefox UpgradeStatus: Upgraded to precise on 2012-01-01 (17 days ago) WpaSupplicantLog: dmi.bios.date: 02/17/2011 dmi.bios.vendor: American Megatrends Inc. dmi.bios.version: 1902 dmi.board.asset.tag: To Be Filled By O.E.M. dmi.board.name: Crosshair IV Formula dmi.board.vendor: ASUSTeK Computer INC. dmi.board.version: Rev 1.xx dmi.chassis.asset.tag: Asset-1234567890 dmi.chassis.type: 3 dmi.chassis.vendor: Chassis Manufacture dmi.chassis.version: Chassis Version dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr1902:bd02/17/2011:svnSystemmanufacturer:pnSystemProductName:pvrSystemVersion:rvnASUSTeKComputerINC.:rnCrosshairIVFormula:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion: dmi.product.name: System Product Name dmi.product.version: System Version dmi.sys.vendor: System manufacturer mtime.conffile..etc.apparmor.d.usr.bin.firefox: 2012-01-19T13:51:49.097296 ** Affects: firefox (Ubuntu) Importance: Undecided Status: New ** Tags: apparmor apport-bug beta-channel i386 patch precise -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/918879 Title: Firefox apparmor profile, WebGL/DRI and libc corrections. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/918879/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs