On 2/6/19 4:54 PM, Simon McVittie wrote: > On Wed, 06 Feb 2019 at 16:20:32 +0100, Julien Cristau wrote: >> trying to open a pdf file from my local firefox installs fails, with a >> message like the below in the kernel log: >> >> [239440.060481] audit: type=1400 audit(1549462128.942:91): apparmor="DENIED" >> operation="file_mmap" profile="/usr/bin/evince" >> name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992 >> comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000 >> [239440.062127] audit: type=1400 audit(1549462128.942:92): apparmor="DENIED" >> operation="file_mmap" profile="/usr/bin/evince" >> name="/home/jcristau/firefox/beta/firefox/libnss3.so" pid=4992 >> comm="EvJobScheduler" requested_mask="m" denied_mask="m" fsuid=1000 ouid=1000 > > I assume your local Firefox build sets a LD_LIBRARY_PATH on itself and its > child processes? > Looks like it does. *sigh*
I wonder if we could fix it there to undo its env changes before exec()ing external apps. Cheers, Julien
