Public bug reported:
When I launch Firefox with apparmor enabled, I get the following errors:
Mar 6 13:10:11 tigreraye kernel: [ 1090.388691] audit: type=1400
audit(1457266211.486:104): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/proc/ati/major" pid=5705
comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.389259] audit: type=1400
audit(1457266211.486:105): apparmor="DENIED" operation="exec"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}"
name="/usr/bin/amd-console-helper" pid=5706 comm="firefox" requested_mask="x"
denied_mask="x" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.391940] audit: type=1400
audit(1457266211.490:106): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392116] audit: type=1400
audit(1457266211.490:107): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392126] audit: type=1400
audit(1457266211.490:108): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392133] audit: type=1400
audit(1457266211.490:109): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392140] audit: type=1400
audit(1457266211.490:110): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392146] audit: type=1400
audit(1457266211.490:111): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392152] audit: type=1400
audit(1457266211.490:112): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392159] audit: type=1400
audit(1457266211.490:113): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Adding the following lines to the apparmor profile fixes the issue:
/dev/ati/card0 rw,
/proc/ati/major r,
/proc/ati/0/name r,
** Affects: firefox (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1553708
Title:
usr.bin.firefox profile blocks access to the AMD GPU
Status in firefox package in Ubuntu:
New
Bug description:
When I launch Firefox with apparmor enabled, I get the following
errors:
Mar 6 13:10:11 tigreraye kernel: [ 1090.388691] audit: type=1400
audit(1457266211.486:104): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/proc/ati/major" pid=5705
comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.389259] audit: type=1400
audit(1457266211.486:105): apparmor="DENIED" operation="exec"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}"
name="/usr/bin/amd-console-helper" pid=5706 comm="firefox" requested_mask="x"
denied_mask="x" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.391940] audit: type=1400
audit(1457266211.490:106): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392116] audit: type=1400
audit(1457266211.490:107): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392126] audit: type=1400
audit(1457266211.490:108): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392133] audit: type=1400
audit(1457266211.490:109): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392140] audit: type=1400
audit(1457266211.490:110): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392146] audit: type=1400
audit(1457266211.490:111): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392152] audit: type=1400
audit(1457266211.490:112): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Mar 6 13:10:11 tigreraye kernel: [ 1090.392159] audit: type=1400
audit(1457266211.490:113): apparmor="DENIED" operation="open"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/ati/card0" pid=5705
comm="firefox" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
Adding the following lines to the apparmor profile fixes the issue:
/dev/ati/card0 rw,
/proc/ati/major r,
/proc/ati/0/name r,
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1553708/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
