PositionSource blocked by AppArmor even with "loaction" policy_group enabled.

Bug #1223211 reported by Michael Zanetti
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apparmor-easyprof-ubuntu (Ubuntu)
Fix Released
High
Unassigned
Saucy
Fix Released
High
Unassigned

Bug Description

I'm creating a click package for an application that makes use of qtdeclarative5-qtlocation-plugin by using this code

import QtLocation 5.0
...
PositionSource {
}

This is the apparmor information file in the click package:

{
    "policy_groups": ["networking", "location"],
    "policy_version": 1
}

This happens why I try to run the app:

terminate called after throwing an instance of 'std::runtime_error'
  what(): An AppArmor policy prevents this sender from sending this message
to this recipient, 0 matched rules; type="method_call", sender="(null)"
(inactive) interface="org.freedesktop.DBus" member="Hello" error
name="(unset)" requested_reply="0" destination="org.freedesktop.DBus" (bus)

ProblemType: Bug
DistroRelease: Ubuntu 13.10
Package: apparmor 2.8.0-0ubuntu27
ProcVersionSignature: Error: [Errno 2] No such file or directory: '/proc/version_signature'
Uname: Linux 3.4.0-3-mako armv7l
ApportVersion: 2.12.1-0ubuntu3
Architecture: armhf
Date: Tue Sep 10 07:16:59 2013
InstallationDate: Installed on 2013-09-07 (2 days ago)
InstallationMedia: Ubuntu Saucy Salamander (development branch) - armhf (20130907)
MarkForUpload: True
ProcKernelCmdline: console=ttyHSL0,115200,n8 androidboot.hardware=mako lpj=67677 uart_console=enable lcd_maker_id=primary lge.hreset=off lge.reset=mode_reset gpt=enable lge.kcal=0|0|0|x lge.rev=rev_11 mdm_force_dump_enabled androidboot.emmc=true androidboot.serialno=007c09ab10897992 androidboot.bootloader=MAKOZ10o androidboot.baseband=mdm bootreason=reboot
SourcePackage: apparmor
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Michael Zanetti (mzanetti) wrote :
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Thanks for your report. There was an error in the apport hook which prevented it from attaching the logs needed to debug this issue. Can you attach your syslog (so I can debug both the apparmor hook error and see the apparmor denials).

Changed in apparmor (Ubuntu Saucy):
status: New → Incomplete
importance: Undecided → High
assignee: nobody → Jamie Strandboge (jdstrand)
affects: apparmor (Ubuntu Saucy) → apparmor-easyprof-ubuntu (Ubuntu Saucy)
Changed in apparmor-easyprof-ubuntu (Ubuntu Saucy):
assignee: Jamie Strandboge (jdstrand) → nobody
status: Incomplete → In Progress
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

The problem is that the policy groups allows connections to the session bus, but qtdeclarative5-qtlocation-plugin is connecting to the system bus with PositionSource. I am going to unblock access to the qtlocation api by allowing access to the location service via the system bus temporarily, but this will change in the future (hopefully transparently to applications). See bug #1223371 for more information.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.0.30

---------------
apparmor-easyprof-ubuntu (1.0.30) saucy; urgency=low

  * update location policy group to allow connections to location service on
    the system bus (LP: #1223211). This will need to be updated once the
    trust-store is implemented (that is tracked in LP: 1223371)
  * move ubuntu-webapp-experimental to ubuntu-webapp
  * ubuntu-* templates: clarify comments on XDG base dirs
 -- Jamie Strandboge <email address hidden> Tue, 10 Sep 2013 08:49:06 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu Saucy):
status: In Progress → Fix Released
Revision history for this message
Michael Zanetti (mzanetti) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.