Your message dated Wed, 20 Sep 2017 16:34:13 +0000 with message-id <[email protected]> and subject line Bug#865206: fixed in apparmor 2.11.0-11 has caused the Debian Bug report #865206, regarding apparmor: Should apparmor abstractions allow flatpak directories? to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 865206: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865206 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: apparmor Version: 2.11.0-3 Severity: wishlist Dear Maintainer, I was updating my browser profiles and saw firefox was trying to load some flatpak mime exports. Should the apparmor profiles allow those? Diane [113716.169929] audit: type=1400 audit(1497894513.471:785): apparmor="DENIED" operation="open" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor- browser_*/Browser/firefox" name="/var/lib/flatpak/exports/share/mime/mime.cache" pid=933 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [113716.169957] audit: type=1400 audit(1497894513.471:786): apparmor="DENIED" operation="open" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor- browser_*/Browser/firefox" name="/var/lib/flatpak/exports/share/mime/globs2" pid=933 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [113716.169964] audit: type=1400 audit(1497894513.471:787): apparmor="DENIED" operation="open" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor- browser_*/Browser/firefox" name="/var/lib/flatpak/exports/share/mime/magic" pid=933 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [113716.169974] audit: type=1400 audit(1497894513.471:788): apparmor="DENIED" operation="open" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor- browser_*/Browser/firefox" name="/var/lib/flatpak/exports/share/mime/aliases" pid=933 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 [113716.169979] audit: type=1400 audit(1497894513.471:789): apparmor="DENIED" operation="open" profile="/home/*/.local/share/torbrowser/tbb/{i686,x86_64}/tor- browser_*/Browser/firefox" name="/var/lib/flatpak/exports/share/mime/subclasses" pid=933 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 -- System Information: Debian Release: 9.0 APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'stable-debug'), (500, 'testing'), (500, 'stable'), (110, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages apparmor depends on: ii debconf [debconf-2.0] 1.5.61 ii init-system-helpers 1.48 ii libapparmor-perl 2.11.0-3 ii libc6 2.24-11+deb9u1 ii lsb-base 9.20161125 ii python3 3.5.3-1 apparmor recommends no packages. Versions of packages apparmor suggests: ii apparmor-profiles 2.11.0-3 ii apparmor-profiles-extra 1.11 ii apparmor-utils 2.11.0-3 -- debconf information: apparmor/homedirs:
--- End Message ---
--- Begin Message ---Source: apparmor Source-Version: 2.11.0-11 We believe that the bug you reported is fixed in the latest version of apparmor, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. intrigeri <[email protected]> (supplier of updated apparmor package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 03 Sep 2017 09:05:00 +0000 Source: apparmor Binary: apparmor apparmor-utils apparmor-profiles libapparmor-dev libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor apparmor-notify python-libapparmor python3-libapparmor python-apparmor python3-apparmor dh-apparmor apparmor-easyprof Architecture: source Version: 2.11.0-11 Distribution: unstable Urgency: medium Maintainer: Debian AppArmor Team <[email protected]> Changed-By: intrigeri <[email protected]> Closes: 865206 871953 872167 Description: apparmor-easyprof - AppArmor easyprof profiling tool apparmor-notify - AppArmor notification system apparmor-profiles - profiles for AppArmor Security policies apparmor - user-space parser utility for AppArmor apparmor-utils - utilities for controlling AppArmor dh-apparmor - AppArmor debhelper routines libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor1 - changehat AppArmor library libapparmor-dev - AppArmor development libraries and header files libapparmor-perl - AppArmor library Perl bindings libpam-apparmor - changehat AppArmor library as a PAM module python3-apparmor - AppArmor Python3 utility library python3-libapparmor - AppArmor library Python3 bindings python-apparmor - AppArmor Python utility library python-libapparmor - AppArmor library Python bindings Changes: apparmor (2.11.0-11) unstable; urgency=medium . * Only use systemd-detect-virt when it's installed (Closes: #871953). * dh_apparmor: include the version of the package, so that one can find packages that were built with a particular version of dh_apparmor. (Closes: #872167). * Import patch submitted upstream to support Flatpak exports (Closes: #865206). * Revert "Build with GCC-6 on mips64el to workaround Debian#871538": that gcc-7 bug was fixed in 7.2.0-3 on 2017-09-02, presumably all buildd's chroot should have it by now. * Merge from Ubuntu citrain up to revision 1627, aka. 2.11.0-2ubuntu17. Applied all changes (filtering from that list what had already been done in Debian): - Remove apparmor system upstart job on upgrades. - r3631-apparmor-utils-python3.6-LOCALE.patch: fix utils to avoid breakage with python 3.6 (LP: #1661766). - nameservice-add-stub-resolv.patch: allow read access to systemd stub resolver configuration Checksums-Sha1: e6e271ec3ae391590f5cbad700f8e6c696ad6861 3125 apparmor_2.11.0-11.dsc eb51adbceee2e25ab8270f563a7f4dd9614ec4bb 88956 apparmor_2.11.0-11.debian.tar.xz Checksums-Sha256: 418e6c1a67c8e970d3b0b0417f6124dbe1e5371908e8af60a88d1487de1ff2f8 3125 apparmor_2.11.0-11.dsc 07dc32b369c62a05fd4a0a7c0007ba5bb6f2f36ace6db38989c8b99b8fa0c050 88956 apparmor_2.11.0-11.debian.tar.xz Files: 76cd1afc88c196b0339b7a351455d7cc 3125 admin extra apparmor_2.11.0-11.dsc 09a4a631e8cc8307c591f964d92a336c 88956 admin extra apparmor_2.11.0-11.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcMAxqZeuB0p8dimNy2kI2AAOzf4FAlnCl7gACgkQy2kI2AAO zf59yRAAsexDw5cXfS75DolcnMKAAcfZ8G10KoDPIec+lEeLQdPF4vTIm8O/8yNV APAEhZVCzhKAylYXfDSjj/QG4Czqouqc3QHwIxm8zEbtSg5tv4UR6MNZlLnBwrDy ujWLlwYyxgbXE/75BciTurz2qJ6r5BZIpZ9HZuRSzxcEfaHsdsgpnBxELU0S4MZl CSVckX0clBuQmOF+FyOx4YwZp+Hf222wLArQTGFxOrmoTItIpLgVyvmdqXrLh7BG 2RvHdPk9QwVbRNJl7IByC9QzEsU9SJ/c2Nv6uGxB8wghN2ZJZPsdgUdTY6fMIfO9 fRkjV6Munzg/Ha5uIRk3eQp1PgNSzbPZucZQhUX19OfSb/SJY6cW5pmxm/AN4E9y Mo6PipdMxFOiKNfLQDfTm/5WwWE+kstgIQVxQL2PigRpWg/HcBULSCC86za69/mF jbdUAN0omE9HUrnX/nmQiRCboJWQfHdnajVKM92LswHMce8s8ApXH/G5YiHQeKWb J2mw0Auv/AlT5bxML5TLxwbbfSXp6KxWs5+qMpz0nl0dO1HB6bWrV6lJXtiNrQiX q1jDsZVHKA4KD93l8tNxPBJBgt1EbK7qDUwws41rWxhV+fOYu1zmIUDrdpZEeEXv 1J7f7++ZMdaxBYUhclKi9mwapLHFzf9/hdmpqzBhqxnU4y8l4Q8= =PzPg -----END PGP SIGNATURE-----
--- End Message ---
