apparmor denial for bind on name="org.freedesktop.Application"

Bug #1378823 reported by Jamie Strandboge
30
This bug affects 5 people
Affects Status Importance Assigned to Milestone
apparmor-easyprof-ubuntu (Ubuntu)
Triaged
Low
Unassigned
ubuntu-ui-toolkit (Ubuntu)
Fix Released
High
Alexandre Abreu
Vivid
Confirmed
Undecided
Unassigned

Bug Description

apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=NNN profile="com.ubuntu.gallery_gallery_2.9.1.1084"

This looks to be similar to bug #1342129 and bug #1357371, but for the gallery. We won't be adding a rule to apparmor-easyprof-ubuntu to bind on org.freedesktop.Application because we can't mediate dbus message contents and adding this rule would mean apps could bind on each other's names. I'm not sure why the gallery app is doing this, but you may want to see the comments in bug 1342129 on how the webapps team solved this.

Marking priority as Critical since this is likely representing broken functionality and ota-1 since it is unlikely it can be fixed in time for rtm. Please feel free to adjust.

Related branches

Bill Filler (bfiller)
Changed in gallery-app (Ubuntu):
assignee: nobody → Arthur Mello (artmello)
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Per Alex, this actually doesn't affect the app and needs a fix to ubuntu-ui-toolkit. Retargeting and reducing priority.

Changed in gallery-app (Ubuntu):
assignee: Arthur Mello (artmello) → Alexandre Abreu (abreu-alexandre)
importance: Critical → High
status: New → Triaged
affects: gallery-app (Ubuntu) → ubuntu-ui-toolkit (Ubuntu)
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Adding apparmor-easyprof-ubuntu task. When this bug is fixed, I can remove the workaround explicit denials for this.

Changed in apparmor-easyprof-ubuntu (Ubuntu):
importance: Undecided → Low
status: New → Triaged
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Adding apparmor-easyprof-ubuntu task. When this bug is fixed, I can remove the workaround explicit denials that are in place for webapps.

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

Note, the apparmor-easyprof-ubuntu task does not need to be fixed in ota.

Changed in apparmor-easyprof-ubuntu (Ubuntu):
milestone: none → ubuntu-15.04
Zoltan Balogh (bzoltan)
affects: ubuntu-ui-toolkit (Ubuntu) → ubuntu-ui-toolkit
Zoltan Balogh (bzoltan)
Changed in ubuntu-ui-toolkit (Ubuntu):
assignee: nobody → Alexandre Abreu (abreu-alexandre)
importance: Undecided → High
status: New → Triaged
Zoltan Balogh (bzoltan)
no longer affects: ubuntu-ui-toolkit
Zsombor Egri (zsombi)
Changed in ubuntu-ui-toolkit (Ubuntu):
status: Triaged → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (4.3 KiB)

This bug was fixed in the package ubuntu-ui-toolkit - 1.1.1403+15.04.20150206-0ubuntu1

---------------
ubuntu-ui-toolkit (1.1.1403+15.04.20150206-0ubuntu1) vivid; urgency=medium

  [ Albert Astals Cid ]
  * Adapt to behaviour change in handling of QVariants from QML to
    C++ in Qt 5.4
  * Don't use Qt::PopupFocusReason to change the focus Even if it
    is the correct reason QtQuick is since 5.4 ignoring focus changes
    due to PopupFocusReason. Fixes LP: #1395014.
  * Fix test failure with Qt 5.4 ExpandablesColumn::test_expandedItem()
    In Qt 5.4 an alias to a null variable is correctly null instead of
    undefined like it was in 5.3, since we still want 5.3 support i'm
    conveting it to a verify with == that uses JS loose comparison to
    accept both null and undefined. Fixes LP: #1395012.

  [ Alexandre Abreu ]
  * Remove the unecessary DBUS bindingi to global address
    org.freedesktop.Application by the UriHAndler. It actually fails
    for confined apps and the uri-dispatcher anyway does not work by
    directly calling into the exposed "well known names" exposed on
    the bus as TEd explains here LP: #1342129 but by directly calling
     into the process dbus connection. Fixes LP: #1378823.

  [ Benjamin Zeller ]
  * Fix scripts to work in shadowbuild mode.
  * Shadowbuild support for ubuntu-ui-toolkit.

  [ Christian Dywan ]
  * Abort export_modules_dir.sh and ergo run_tests.sh if binaries are
    absent. Fixes LP: #1415973.
  * Asterisk are needed for cp -R.
  * Ensure adb is running (and fallback arch if dpkg-dev is missing).
    Fixes LP: #1417997.
  * Get arch for push_to_phone.sh from device and handle adb refusal.
  * Implement and unit-test i18n.(c)tag. Fixes LP: #1417031.
  * Print component creation errors in popupUtils.open.
    Fixes LP: #1418507.
  * Use correct unfocussed text field color. Fixes LP: #1396062.

  [ Daniel d'Andrada ]
  * Refactor OrientationHelper Simplify animation code and make it
    more robust. It now survives changes in Screen.primaryOrientation
    and Screen.orientation happening one right after the other.

  [ Daniel Holbach ]
  * Fix broken link to developer site.

  [ Giulio Collura ]
  * This is a bugfix for bug LP: #1341814 and bug LP: #1400297.
    Essentially we have to force the removal of the previous
    'contents' item by removing its parent. This way we ensure that
    the contents are correctly hidden, focused and removed, without
    destroying them.

  [ Loïc Molinari ]
  * Removed unused variables breaking debug builds.

  [ Michael Sheldon ]
  * Only use stableOrientationAngleTimer in the OrientationHelper when
    the orientationAngle has been set automatically.
    Fixes LP: #1409027.

  [ Niklas Wenzel ]
  * Fixes LP: #1395118

  [ nskaggs ]
  * Re-add autopilot helper documentation and update. Fixes
    LP: #1409778, LP: #1410477.

  [ Tim Peeters ]
  * Add a preview of the new list items to the UITK component gallery.
  * Add performance test for MainView.
  * Clean python code to follow pep257 standards.
  * Fix incorrect header contents width when navigating back from a
    page with a lot of actions. Fixes LP: #1408481.
  * Split up MainView in MainView and ...

Read more...

Changed in ubuntu-ui-toolkit (Ubuntu):
status: In Progress → Fix Released
Changed in apparmor-easyprof-ubuntu (Ubuntu):
milestone: ubuntu-15.04 → later
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in ubuntu-ui-toolkit (Ubuntu Vivid):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.