Apparmor blocks telepathy config

Bug #871497 reported by Nyan Cat
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
telepathy-mission-control-5 (Ubuntu)
Fix Released
Undecided
Jamie Strandboge

Bug Description

[14287.471372] type=1400 audit(1318195358.966:27): apparmor="DENIED" operation="mkdir" parent=1 profile="/usr/lib/telepathy/telepathy-*" name="/home/krzysiek2/.config/indicators/" pid=9028 comm="telepathy-haze" requested_mask="c" denied_mask="c" fsuid=1003 ouid=1003

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: apparmor 2.7.0~beta1+bzr1774-1ubuntu2
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Uname: Linux 3.0.0-12-generic x86_64
NonfreeKernelModules: nvidia wl
ApparmorStatusOutput:
 Error: command ['gksu', '-D', 'Apport', '--', '/usr/sbin/apparmor_status'] failed with exit code 1:
 (gksu:10838): Gtk-WARNING **: Unable to locate theme engine in module_path: "pixmap",

 (gksu:10838): Gdk-CRITICAL **: IA__gdk_window_set_opacity: assertion `GDK_IS_WINDOW (window)' failed
ApportVersion: 1.23-0ubuntu3
Architecture: amd64
Date: Sun Oct 9 23:36:04 2011
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Alpha amd64 (20110808)
ProcKernelCmdline: BOOT_IMAGE=/vmlinuz-3.0.0-12-generic root=UUID=3c797b96-140f-40c6-b46b-2f51dba5a6af ro quiet splash vt.handoff=7
SourcePackage: apparmor
UpgradeStatus: Upgraded to oneiric on 2011-09-23 (16 days ago)

Revision history for this message
Nyan Cat (nyancat) wrote :
summary: - Appor blocks telepathy config
+ Apparmor blocks telepathy config
affects: apparmor (Ubuntu) → telepathy-mission-control-5 (Ubuntu)
Changed in telepathy-mission-control-5 (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
status: New → Triaged
tags: added: apparmor
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

These are the errors from kern.log:
Oct 9 23:22:38 krzysztof-MacBook kernel: [14287.471372] type=1400 audit(1318195358.966:27): apparmor="DENIED" operation="mkdir" parent=1 profile="/usr/lib/telepathy/telepathy-*" name="/home/krzysiek2/.config/indicators/" pid=9028 comm="telepathy-haze" requested_mask="c" denied_mask="c" fsuid=1003 ouid=1003
Oct 9 23:29:30 krzysztof-MacBook kernel: [14698.476387] type=1400 audit(1318195769.974:28): apparmor="DENIED" operation="mkdir" parent=1 profile="/usr/lib/telepathy/telepathy-*" name="/home/krzysiek2/.config/indicators/" pid=9952 comm="telepathy-haze" requested_mask="c" denied_mask="c" fsuid=1003 ouid=1003

I cannot reproduce this. Krzysztof, can you give steps to reproduce?

Changed in telepathy-mission-control-5 (Ubuntu):
status: Triaged → Incomplete
Revision history for this message
Nyan Cat (nyancat) wrote :

Sorry Jamie, I haven't looked into e-mail from a long time :D
I will look into that, and give that steps...

Revision history for this message
Omar Abdallah Shaaban (omars) wrote :

any news ?

I have got the same problem but it requests chmod

Dec 28 13:39:32 xxxx kernel: [ 3292.576145] type=1400 audit(1325072372.571:135): apparmor="DENIED" operation="chmod" parent=1 profile="/usr/lib/telepathy/mission-control-5" name="/home/xxxx/.cache/" pid=2084 comm="mission-control" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package telepathy-mission-control-5 - 1:5.10.1-1ubuntu2

---------------
telepathy-mission-control-5 (1:5.10.1-1ubuntu2) precise; urgency=low

  * AppArmor updates to debian/apparmor-profile:
    - allow write for indicators on network restart for haze (LP: #867793)
    - allow reads for indicators for haze (LP: #871497)
    - allow launching of skype from haze (LP: #878839)
    - don't allow mmap of files owned by user
    - allow mission-control-5 writes to .{cache,config}/dconf/user and
      .local/share/telepathy/mission-control/*
 -- Jamie Strandboge <email address hidden> Mon, 02 Jan 2012 14:53:08 -0600

Changed in telepathy-mission-control-5 (Ubuntu):
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.