Ubuntu
webbrowser-app package

[desktop] Crashes on startup

Bug #1508054 reported by Michael Terry
20
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Oxide
Invalid
Undecided
Unassigned
apparmor-easyprof-ubuntu (Ubuntu)
Fix Released
Low
Unassigned
webbrowser-app (Ubuntu)
Fix Released
Critical
Olivier Tilloy

Bug Description

For a little while now on my development machine (which is a Frankenstein environment anyway), which is running wily+overlay, webbrowser-app has been crashing on startup. The console output is below. It looks like a permissions issue? It may have started around the time that webbrowser-app got AppArmor support...

I don't seem to have a file in /var/crash. I don't seem to have *any* files in /var/crash... But maybe this log is enough for now.

(webbrowser-app:12313): dconf-CRITICAL **: unable to create file '/run/user/1001/dconf/user': Permission denied. dconf will not work properly.

(webbrowser-app:12313): dconf-CRITICAL **: unable to create file '/run/user/1001/dconf/user': Permission denied. dconf will not work properly.

(webbrowser-app:12313): dconf-CRITICAL **: unable to create file '/run/user/1001/dconf/user': Permission denied. dconf will not work properly.
org.gtk.vfs.MountTracker.listMountableInfo call failed: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.148" (uid=1001 pid=12313 comm="webbrowser-app ") interface="org.gtk.vfs.MountTracker" member="ListMountableInfo" error name="(unset)" requested_reply="0" destination=":1.9" (uid=1001 pid=3669 comm="/usr/lib/gvfs/gvfsd ") (g-dbus-error-quark, 9)
shm_open() failed: Permission denied
file:///usr/lib/x86_64-linux-gnu/qt5/qml/Ubuntu/Components/1.3/Sections.qml:96: TypeError: Cannot read property 'length' of undefined
qml: Loaded 3 UA override(s) from file:///usr/lib/x86_64-linux-gnu/qt5/qml/Ubuntu/Web/ua-overrides-desktop.js
[1020/092321:ERROR:shared_memory_posix.cc(290)] Creating shared memory in /dev/shm/.org.chromium.Chromium.nxp9C4 failed: Permission denied
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(210)] CommandBufferProxy::Initialize failed.
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(229)] Failed to initialize command buffer.
[1020/092321:ERROR:shared_memory_posix.cc(290)] Creating shared memory in /dev/shm/.org.chromium.Chromium.jaBUVR failed: Permission denied
[1020/092321:ERROR:shared_memory_posix.cc(290)] Creating shared memory in /dev/shm/.org.chromium.Chromium.5McNeF failed: Permission denied
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(210)] CommandBufferProxy::Initialize failed.
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(229)] Failed to initialize command buffer.
[1020/092321:ERROR:shared_memory_posix.cc(290)] Creating shared memory in /dev/shm/.org.chromium.Chromium.O6PKxs failed: Permission denied
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(210)] CommandBufferProxy::Initialize failed.
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(229)] Failed to initialize command buffer.
[1020/092321:ERROR:shared_memory_posix.cc(290)] Creating shared memory in /dev/shm/.org.chromium.Chromium.qbYMQf failed: Permission denied
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(210)] CommandBufferProxy::Initialize failed.
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(229)] Failed to initialize command buffer.
[1020/092321:ERROR:shared_memory_posix.cc(290)] Creating shared memory in /dev/shm/.org.chromium.Chromium.6o0292 failed: Permission denied
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(210)] CommandBufferProxy::Initialize failed.
[1020/092321:ERROR:webgraphicscontext3d_command_buffer_impl.cc(229)] Failed to initialize command buffer.
[1020/092321:FATAL:oxide_compositor.cc(185)] Check failed: num_failed_recreate_attempts_ <= 4 (5 vs. 4)
Aborted

Related branches

lp:~osomon/apparmor-easyprof-ubuntu/webview-allow-dev-shm
Jamie Strandboge (community): Needs Fixing
Diff: 25 lines (+4/-4)
1 file modified
data/policygroups/ubuntu/1.1/webview (+4/-4)
lp:~osomon/webbrowser-app/aa-profile-allow-dev-shm
PS Jenkins bot: Approve (continuous-integration)
Ubuntu Phablet Team: Pending requested
Diff: 12 lines (+2/-1)
1 file modified
debian/rules (+2/-1)
Revision history for this message
Olivier Tilloy (osomon) wrote :

This looks similar to https://bugzilla.redhat.com/show_bug.cgi?id=753882. I wonder what got you into that state. Do other apps that use dconf work?

Revision history for this message
Olivier Tilloy (osomon) wrote :

And can you please check what the permissions of /run/user/1001/dconf/ are?

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in webbrowser-app (Ubuntu):
status: New → Confirmed
Revision history for this message
Michael Terry (mterry) wrote :

$ ls -ld /run/user/1001/dconf/
drwx------ 2 mike mike 60 Oct 20 10:43 /run/user/1001/dconf/

$ ls -l /run/user/1001/dconf/
-rw------- 1 mike mike 2 Oct 20 10:46 user

Which is all correct. Everything else on my desktop (including other things that use dconf) work correctly.

Revision history for this message
Michael Terry (mterry) wrote :

The timing of this problem with webbrowser-app getting AppArmor support is suspicious to me.

Revision history for this message
Olivier Tilloy (osomon) wrote :

Allan (alesage) is reporting the same issue on vivid desktop.

Revision history for this message
Olivier Tilloy (osomon) wrote :

I’m seeing that on my vivid desktop too.

Changed in webbrowser-app (Ubuntu):
assignee: nobody → Olivier Tilloy (osomon)
importance: Undecided → Critical
Revision history for this message
Olivier Tilloy (osomon) wrote :

The browser’s profile has the following rule:

    deny /run/user/[0-9]*/dconf/user rw,

It seems this was added as part of bug #1260101. At the time Jamie commented that oxide appeared to work ok even with dconf access being denied. This is still the case on touch devices, but apparently not on desktops.

Revision history for this message
Olivier Tilloy (osomon) wrote :

Actually, I just realized that the dconf error is most probably a red herring, what makes oxide unhappy is the following denials:

    Creating shared memory in /dev/shm/.org.chromium.Chromium.* failed

Revision history for this message
Olivier Tilloy (osomon) wrote :

I suppose oxide should be allowed to write to /dev/shm/.org.chromium.Chromium.*, any reason for not allowing that?

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

That is fine to add and is almost certainly the cause of the issue.

Revision history for this message
Chris Coulson (chrisccoulson) wrote :

It needs to be able to map those files too

Olivier Tilloy (osomon)
summary: - [desktop] Crashes on startup with wily+overlay
+ [desktop] Crashes on startup
Olivier Tilloy (osomon)
Changed in apparmor-easyprof-ubuntu (Ubuntu):
assignee: nobody → Olivier Tilloy (osomon)
status: New → In Progress
Changed in webbrowser-app (Ubuntu):
status: Confirmed → Invalid
Changed in apparmor-easyprof-ubuntu (Ubuntu):
importance: Undecided → Critical
Changed in oxide:
status: New → Invalid
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

09:09 < jdstrand> oSoMoN: we can't fix that in apparmor easyprof
09:10 < jdstrand> oSoMoN: not in a stable update. it will regenerate all
                  apparmor policy for webapps
09:10 < jdstrand> oSoMoN: which is a time consuming operation
09:10 < jdstrand> oSoMoN: it can be fixed in the 16.04 policy
09:10 < oSoMoN> jdstrand, how can we proceed then? other apps embedding a
                webview are going to hit the same issue, I’d think
09:10 < jdstrand> oSoMoN: it can be fixed in the 16.04 policy
09:11 < jdstrand> oSoMoN: the phone is fine
09:11 < oSoMoN> yes, the issue is desktop-specific
09:11 < jdstrand> oSoMoN: what other apps are you talking about?
09:11 < jdstrand> oSoMoN: personal will use the 16.04 policy, which can be fixed
09:12 < oSoMoN> jdstrand, I don’t have any specific example, I guess any app
                with a webview that runs confined, on desktop, will get the
                denials
09:12 < jdstrand> so, I think the path forward is fix webbrowser-app today (use
                  write_path) and then have the 16.04 policy fix this
09:12 < jdstrand> oSoMoN: yes, but those things don't run on the desktop today
09:12 < jdstrand> they will in personal
09:13 < jdstrand> but personal isn't until 16.04 or later

Changed in webbrowser-app (Ubuntu):
status: Invalid → In Progress
Changed in apparmor-easyprof-ubuntu (Ubuntu):
importance: Critical → Low
status: In Progress → Triaged
assignee: Olivier Tilloy (osomon) → nobody
tags: added: application-confinement
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package webbrowser-app - 0.23+15.10.20151022.1-0ubuntu1

---------------
webbrowser-app (0.23+15.10.20151022.1-0ubuntu1) wily; urgency=medium

  [ CI Train Bot ]
  * New rebuild forced.
  * Resync trunk.

  [ Olivier Tilloy ]
  * Add an exception to the generated apparmor profile to allow reading
    HERE’s TOS in the browser. (LP: #1507667)
  * Modify the generated apparmor profile to allow rw access to
    /dev/shm/.org.chromium.Chromium.* too. (LP: #1508054)
  * Update translation template.

  [ Ugo Riboni ]
  * Fix inability to drag the map to pan in Google maps, on desktop.
    (LP: #1503506)
  * Implement support for allowing or denying access to media input
    devices and for setting default media input devices. (LP: #1410996)
  * Refactor the BookmarksModel to be a singleton.

 -- Olivier Tilloy <email address hidden> Thu, 22 Oct 2015 15:07:49 +0000

Changed in webbrowser-app (Ubuntu):
status: In Progress → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor-easyprof-ubuntu - 16.04.1

---------------
apparmor-easyprof-ubuntu (16.04.1) xenial; urgency=medium

  * create policy version 16.04 for xenial
  * adjust autopkgtests for policy version 15.10
  * ubuntu/ubuntu-sdk, ubuntu/webview: allow /dev/shm in addition to /run/shm
    (LP: #1508054)

 -- Jamie Strandboge <email address hidden> Mon, 26 Oct 2015 15:52:48 -0500

Changed in apparmor-easyprof-ubuntu (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.