apparmor profile for telepathy need c-mask.

Bug #819321 reported by Oleksij Rempel
20
This bug affects 3 people
Affects Status Importance Assigned to Milestone
telepathy-mission-control-5 (Ubuntu)
Fix Released
Low
Jamie Strandboge

Bug Description

Current apparmor profile for telepathy assume that files and folders do exist in user home folder and allow only read and write mask. In case it is new use, this profile need creation mask. Here dmesg i get:

[11708.341078] type=1400 audit(1312193946.941:18): apparmor="DENIED" operation="mkdir" parent=1 profile="/usr/lib/telepathy/telepathy-*" name="/home/lex/.cache/wocky/" pid=2836 comm="telepathy-gabbl" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

[26194.609075] type=1400 audit(1312208433.209:23): apparmor="DENIED" operation="mkdir" parent=1 profile="/usr/lib/telepathy/telepathy-*" name="/home/lex/.local/share/TpLogger/" pid=2828 comm="telepathy-logge" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: telepathy-mission-control-5 1:5.9.0-1ubuntu4
ProcVersionSignature: Ubuntu 3.0.0-7.9-generic-pae 3.0.0
Uname: Linux 3.0.0-7-generic-pae i686
Architecture: i386
Date: Mon Aug 1 16:17:51 2011
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Alpha i386 (20110705.1)
ProcEnviron:
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SourcePackage: telepathy-mission-control-5
UpgradeStatus: Upgraded to oneiric on 2011-07-31 (1 days ago)

Revision history for this message
Oleksij Rempel (olerem) wrote :
Revision history for this message
Oleksij Rempel (olerem) wrote :

to fix it i added:
owner @{HOME}/.cache/wocky/ rw,

and changed:
owner @{HOME}/.local/share/TpLogger/ rw,

Changed in telepathy-mission-control-5 (Ubuntu):
importance: Undecided → Low
status: New → Confirmed
Changed in telepathy-mission-control-5 (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
status: Confirmed → Triaged
Changed in telepathy-mission-control-5 (Ubuntu):
status: Triaged → In Progress
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package telepathy-mission-control-5 - 1:5.9.0-1ubuntu5

---------------
telepathy-mission-control-5 (1:5.9.0-1ubuntu5) oneiric; urgency=low

  * debian/apparmor-profile: allow write access to @{HOME}/.cache/wocky/
    and @{HOME}/.local/share/TpLogger/ for first time users (LP: #819321)
 -- Jamie Strandboge <email address hidden> Tue, 16 Aug 2011 06:47:21 -0500

Changed in telepathy-mission-control-5 (Ubuntu):
status: Fix Committed → Fix Released
Revision history for this message
Tony Travis (ajtravis) wrote :

Although this bug is fixed, the same symptoms appear when using the default apparmor configuration if user accounts are not stored in /home. For example, if accounts are stored in /homes this path needs to be added to the apparmour configuration:

--- /etc/apparmor.d/tunables/.old/home 2012-06-05 08:27:07.000000000 +0100
+++ /etc/apparmor.d/tunables/home 2012-11-02 00:40:15.658640991 +0000
@@ -18,7 +18,7 @@
 # @{HOMEDIRS} is a space-separated list of where user home directories
 # are stored, for programs that must enumerate all home directories on a
 # system.
-@{HOMEDIRS}=/home/
+@{HOMEDIRS}=/home/ /homes/

 # Also, include files in tunables/home.d for site-specific adjustments to
 # @{HOMEDIRS}.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.