telepathy-ofono tries to open /proc/1728/fd/ and is DENIED access by apparmor

Bug #1375249 reported by David Barth
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
telepathy-ofono (Ubuntu)
Fix Released
High
Ricardo Salveti

Bug Description

I noticed quite a few occurences of these in my logs:

hablet@ubuntu-phablet:/usr/share/ofono/scripts$ sudo dmesg | grep -i ofo
[sudo] password for phablet:
[ 16.814527] type=1400 audit(1411984297.763:93): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-ofono" name="/proc/1728/fd/" pid=1728 comm="telepathy-ofono" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
[ 16.827926] type=1400 audit(1411984297.783:94): apparmor="DENIED" operation="exec" profile="/usr/lib/telepathy/telepathy-ofono" name="/usr/bin/pulseaudio" pid=1728 comm="telepathy-ofono" requested_mask="x" denied_mask="x" fsuid=32011 ouid=0
[ 16.843247] type=1400 audit(1411984297.793:95): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-ofono" name="/proc/1729/fd/" pid=1729 comm="telepathy-ofono" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
[ 16.865588] type=1400 audit(1411984297.813:96): apparmor="DENIED" operation="exec" profile="/usr/lib/telepathy/telepathy-ofono" name="/usr/bin/pulseaudio" pid=1729 comm="telepathy-ofono" requested_mask="x" denied_mask="x" fsuid=32011 ouid=0
[ 16.878315] type=1400 audit(1411984297.833:97): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-ofono" name="/proc/1735/fd/" pid=1735 comm="telepathy-ofono" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
[ 16.882130] type=1400 audit(1411984297.833:98): apparmor="DENIED" operation="exec" profile="/usr/lib/telepathy/telepathy-ofono" name="/usr/bin/pulseaudio" pid=1735 comm="telepathy-ofono" requested_mask="x" denied_mask="x" fsuid=32011 ouid=0

Not sure how bad that is. But incidentally, I have not been able to get my new SIM to be recognized by the system.

This is on an N4 running utopic, image #257

Tags: apparmor rtm14

Related branches

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

telepathy-ofono is trying to start pulseaudio via a fork/exec for some reason, but it should not be. I'm not comfortable letting telepathy-ofono start pulseaudio because pulseaudio should be started by the session, not by individual services. Seems like the upstart jobs need to be adjusted so this doesn't happen.

tags: added: apparmor rtm14
Changed in telepathy-mission-control-5 (Ubuntu):
importance: Undecided → High
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Adding the rtm14 tag-- this needs to be fixed there and marking High as I believe this could be performed as ota, but the issue needs to be investigated (ie, I don't know if the dialer works properly when this bug happens).

Revision history for this message
Victor Tuson Palau (vtuson) wrote :

so what is the impact to the user of this?

affects: telepathy-mission-control-5 (Ubuntu) → telepathy-ofono (Ubuntu)
Changed in telepathy-ofono (Ubuntu):
status: New → In Progress
assignee: nobody → Ricardo Salveti (rsalveti)
Revision history for this message
Ricardo Salveti (rsalveti) wrote :

Not necessarily causing bad side effects, but it's something I was planning to fix soon anyway (not letting external clients to autospawn pulseaudio).

* https://code.launchpad.net/~rsalveti/telepathy-ofono/not-autostarting-pulse/+merge/236807
* https://code.launchpad.net/~rsalveti/ubuntu-touch-session/disable-pulse-autospawn-touch/+merge/236808

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package telepathy-ofono - 0.2+14.10.20141006-0ubuntu1

---------------
telepathy-ofono (0.2+14.10.20141006-0ubuntu1) utopic; urgency=low

  [ Ricardo Salveti de Araujo ]
  * qpulse: don't try to autostart pulse when creating context (LP:
    #1375249)
 -- Ubuntu daily release <email address hidden> Mon, 06 Oct 2014 18:52:57 +0000

Changed in telepathy-ofono (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.