Public bug reported:

When I launch Firefox with apparmor enabled, I get the following error:

Mar  6 11:03:26 tigreraye kernel: [87610.428337] audit: type=1400
audit(1457258606.891:190): apparmor="DENIED" operation="connect"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=11860 comm="firefox"
family="unix" sock_type="stream" protocol=0 requested_mask="send receive
connect" denied_mask="send connect" addr=none peer_addr="@/tmp/.ICE-
unix/4748" peer="unconfined"

Adding the following lines to the apparmor profile fixes the issue:

unix (send, receive, connect) type=stream peer=(addr="@/tmp/.ICE-
unix/[0-9]*"),

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1553711

Title:
  usr.bin.firefox apparmor profile block access to ICE sockets

Status in firefox package in Ubuntu:
  New

Bug description:
  When I launch Firefox with apparmor enabled, I get the following
  error:

  Mar  6 11:03:26 tigreraye kernel: [87610.428337] audit: type=1400
  audit(1457258606.891:190): apparmor="DENIED" operation="connect"
  profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=11860
  comm="firefox" family="unix" sock_type="stream" protocol=0
  requested_mask="send receive connect" denied_mask="send connect"
  addr=none peer_addr="@/tmp/.ICE-unix/4748" peer="unconfined"

  Adding the following lines to the apparmor profile fixes the issue:

  unix (send, receive, connect) type=stream peer=(addr="@/tmp/.ICE-
  unix/[0-9]*"),

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1553711/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to