On Thu, May 15, 2014 at 05:25:59PM -0500, Jamie Strandboge wrote:
> 
> I noticed the following denial when using Oxide under X:
> May 15 16:52:06 localhost kernel: [318977.280956] type=1400
> audit(1400190726.317:409): apparmor="DENIED" operation="file_mmap"
> profile="com.ubuntu.developer.jdstrand.rottentomatoes_rottentomatoes_0.10"
> name="/usr/lib/x86_64-linux-gnu/egl/egl_gallium.so" pid=3920
> comm="webapp-containe" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
> 
> Attached is a patch to the X abstraction to fix this issue. This is fine for 
> 2.8
> as well if people want it there.
> 
> -- 
> Jamie Strandboge                 http://www.ubuntu.com/

> Author: Jamie Strandboge <[email protected]>
> Description: allow access to egl libraries in X abstraction
> Bug: https://launchpad.net/bugs/1320014
> 
> Acked-By: Jamie Strandboge <[email protected]>

Acked-by: Seth Arnold <[email protected]>

Thanks

> 
> === modified file 'profiles/apparmor.d/abstractions/X'
> --- profiles/apparmor.d/abstractions/X        2014-02-14 01:23:56 +0000
> +++ profiles/apparmor.d/abstractions/X        2014-05-15 22:03:29 +0000
> @@ -32,6 +32,9 @@
>    /usr/share/X11/**               r,
>    /usr/X11R6/**.so*               mr,
>  
> +  # EGL
> +  /usr/lib/@{multiarch}/egl/*.so* mr,
> +
>    # DRI
>    /usr/lib{,32,64}/dri/**         mr,
>    /usr/lib/@{multiarch}/dri/**    mr,
> 


Attachment: signature.asc
Description: Digital signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to