Ubuntu
apparmor package

qmlscene segfaults and crashes fglrx

Bug #1200392 reported by Alejandro J. Cura on 2013-07-11

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	apparmor (Ubuntu)	Fix Released	Undecided	Jamie Strandboge

Bug Description

When running confined, qmlscene displays a working but corrupted calculator for a few seconds (screenshot attached), and ends up segfaulting itself and crashing the X server on its way out.

From the kernel logs, it looks like the problem happens when accessing the fglrx drivers:

[115242.654027] type=1400 audit(1373573470.414:110): apparmor="DENIED" operation="file_mmap" parent=3273 profile="com.ubuntu.ubuntu-calculator-app_ubuntu-calculator-app.desktop_0.1.3" name="/usr/lib/fglrx/dri/fglrx_dri.so" pid=4156 comm="qmlscene" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
[115246.296234] qmlscene[4156]: segfault at 7f7647105d38 ip 00007f766d625508 sp 00007fff09dc33f0 error 4 in libQt5Gui.so.5.0.2[7f766d50f000+3b4000]

This is on an up to date saucy, running the qml calculator confined as per the instructions in: https://lists.launchpad.net/ubuntu-appstore-developers/msg00238.html

Related branches

lp:ubuntu/saucy-proposed/apparmor

lp:ubuntu/saucy/apparmor

Revision history for this message

Alejandro J. Cura (alecu) wrote on 2013-07-11:

Corrupted qmlscene screenshot Edit (293.8 KiB, image/png)

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2013-07-11:

Thanks for using Ubuntu and reporting a bug. Based on the mailing list, can you confirm this is on amd64? Are the fglrx drivers coming from Ubuntu or somewhere else?

Changed in apparmor (Ubuntu):
status:	New → Incomplete

Revision history for this message

Alejandro J. Cura (alecu) wrote on 2013-07-12: Re: [Bug 1200392] Re: qmlscene segfaults and crashes fglrx

On Thu, Jul 11, 2013 at 7:00 PM, Jamie Strandboge <email address hidden> wrote:
> Thanks for using Ubuntu and reporting a bug. Based on the mailing list,
> can you confirm this is on amd64? Are the fglrx drivers coming from
> Ubuntu or somewhere else?

Yes, this is on amd64.
The fglrx drivers are from saucy/restricted

Alejandro J. Cura (alecu) on 2013-07-12

Changed in apparmor (Ubuntu):
status:	Incomplete → New

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2013-07-12:

Can you add the following to /etc/apparmor.d/abstractions/X:

/usr/lib/fglrx/dri/*.so mr,

Then reload the apparmor profile with:
sudo apparmor_parser -r /etc/apparmor.d/com.ubuntu.ubuntu-calculator-app_ubuntu-calculator-app.desktop_0.1.3

then report back?

Changed in apparmor (Ubuntu):
status:	New → Incomplete
assignee:	nobody → Jamie Strandboge (jdstrand)

Jamie Strandboge (jdstrand) on 2013-07-24

Changed in apparmor (Ubuntu):
status:	Incomplete → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-07-25:

This bug was fixed in the package apparmor - 2.8.0-0ubuntu23

---------------
apparmor (2.8.0-0ubuntu23) saucy; urgency=low

  * debian/patches/0038-lp1200392.patch: allow mmap of fglrx dri libraries
    (LP: #1200392)
  * debian/patches/0039-fix-parser-cache-loc.patch: fix apparmor cache
    tempfile location to use passed arg
  * debian/lib/apparmor/functions: update to also load from
    /var/lib/apparmor/profiles and write cache to /var/cache/apparmor
  * debian/apparmor.dirs: create /var/cache/apparmor and
    /var/lib/apparmor/profiles
-- Jamie Strandboge <email address hidden> Tue, 23 Jul 2013 21:36:40 -0500