Hi jc-moz,

I initially thought so, but switched AppArmor to complain mode (rather
than enforce) and got the same results (also the Mozilla-built Chromium
works fine).  Current AppArmor status:

$ sudo apparmor_status
[...]
17 processes have profiles defined.
9 processes are in enforce mode.
   /sbin/dhclient (2869) 
   /usr/sbin/cups-browsed (7130) 
   /usr/sbin/cupsd (7125) 
   /usr/sbin/dnsmasq (3073) 
   /usr/sbin/dnsmasq (3074) 
   /usr/sbin/dnsmasq (3089) 
   /usr/sbin/dnsmasq (3393) 
   /usr/sbin/libvirtd (2495) 
   /usr/sbin/ntpd (4833) 
8 processes are in complain mode.
   /usr/lib/firefox/firefox{,*[^s][^h]} (7492) 
   /usr/lib/firefox/firefox{,*[^s][^h]} (7544) 
   /usr/lib/firefox/firefox{,*[^s][^h]} (7702) 
   /usr/lib/firefox/firefox{,*[^s][^h]} (19925) 
   /usr/lib/firefox/firefox{,*[^s][^h]} (19963) 
   /usr/sbin/avahi-daemon (2145) 
   /usr/sbin/avahi-daemon (2199) 
   /usr/sbin/nmbd (3616) 


There may be something else than AppArmor going on, but I don't know what.  Do 
you have any idea?

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1741768

Title:
  U2F FIDO authentication doesn't work

Status in firefox package in Ubuntu:
  New

Bug description:
  I have a Yubico U2F security key.  If I download the upstream Firefox
  binary for 57.0.4 and go to https://demo.yubico.com/u2f?tab=register,
  the test page works fine: I can register with a username/password, my
  key starts blinking and I can touch it to validate.

  If I go to the same page using the official Ubuntu package of Firefox,
  the U2F device is not recognized and the page displays the following
  error:

  """
  Registration failed!

  Make sure you have a U2F device connected, and try again.

   Traceback (most recent call last):
    File "/root/python-u2flib-server-demo/examples/yubiauth_server.py", line 
161, in __call__
      raise Exception("FIDO Client error: %s" % error)
  Exception: FIDO Client error: 1 (OTHER ERROR)
  """

  Note that in both cases, I did enable the required options in
  "about:config" (as outlined in e.g. https://www.yubico.com/2017/11
  /how-to-navigate-fido-u2f-in-firefox-quantum/).

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: firefox 57.0.4+build1-0ubuntu0.16.04.1
  ProcVersionSignature: Ubuntu 4.13.0-21.24~16.04.1-generic 4.13.13
  Uname: Linux 4.13.0-21-generic x86_64
  NonfreeKernelModules: zfs zunicode zavl zcommon znvpair nvidia_uvm nvidia_drm 
nvidia_modeset nvidia
  AddonCompatCheckDisabled: False
  ApportVersion: 2.20.1-0ubuntu2.15
  Architecture: amd64
  AudioDevicesInUse:
   USER        PID ACCESS COMMAND
   /dev/snd/controlC0:  antoine    3844 F.... pulseaudio
   /dev/snd/controlC1:  antoine    3844 F.... pulseaudio
  BuildID: 20180104112904
  Channel: Unavailable
  CurrentDesktop: XFCE
  Date: Sun Jan  7 17:32:38 2018
  DefaultProfileIncompatibleExtensions: Default - 
{972ce4c6-7e08-4474-a285-3208198ce6fd}
  DefaultProfilePrefErrors: 'utf-8' codec can't decode byte 0xe9 in position 
2410: invalid continuation byte
  ForcedLayersAccel: False
  IfupdownConfig:
   # interfaces(5) file used by ifup(8) and ifdown(8)
   auto lo
   iface lo inet loopback
  InstallationDate: Installed on 2013-04-12 (1730 days ago)
  InstallationMedia: Xubuntu 13.04 "Raring Ringtail" - Alpha amd64 (20130409)
  MostRecentCrashID: bp-eb109c63-e3b5-4c21-a920-d262b2150407
  Profile1Extensions: extensions.sqlite corrupt or missing
  Profile1IncompatibleExtensions: Unavailable (corrupt or non-existant 
compatibility.ini or extensions.sqlite)
  Profile1Locales: extensions.sqlite corrupt or missing
  Profile1PrefSources: prefs.js
  Profile1Themes: extensions.sqlite corrupt or missing
  Profile2Extensions: extensions.sqlite corrupt or missing
  Profile2IncompatibleExtensions: Unavailable (corrupt or non-existant 
compatibility.ini or extensions.sqlite)
  Profile2Locales: extensions.sqlite corrupt or missing
  Profile2PrefSources: prefs.js
  Profile2Themes: extensions.sqlite corrupt or missing
  Profile3Extensions: extensions.sqlite corrupt or missing
  Profile3IncompatibleExtensions: Unavailable (corrupt or non-existant 
compatibility.ini or extensions.sqlite)
  Profile3Locales: extensions.sqlite corrupt or missing
  Profile3PrefSources: prefs.js
  Profile3Themes: extensions.sqlite corrupt or missing
  Profile4Extensions: extensions.sqlite corrupt or missing
  Profile4IncompatibleExtensions: Unavailable (corrupt or non-existant 
compatibility.ini or extensions.sqlite)
  Profile4Locales: extensions.sqlite corrupt or missing
  Profile4PrefSources: prefs.js
  Profile4Themes: extensions.sqlite corrupt or missing
  Profiles:
   Profile0 (Default) - LastVersion=57.0.4/20180104112904 (In use)
   Profile1 - LastVersion=57.0.4/20180104112904
   Profile2 - LastVersion=57.0.4/20180104112904
   Profile3 - LastVersion=57.0.3/20171227151400 (Out of date)
   Profile4 - LastVersion=57.0.4/20180104112904 (In use)
  RfKill:
   
  RunningIncompatibleAddons: True
  SourcePackage: firefox
  UpgradeStatus: Upgraded to xenial on 2015-07-27 (894 days ago)
  dmi.bios.date: 06/22/2011
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: 1801
  dmi.board.asset.tag: To be filled by O.E.M.
  dmi.board.name: P8H67-M EVO
  dmi.board.vendor: ASUSTeK Computer INC.
  dmi.board.version: Rev 1.xx
  dmi.chassis.asset.tag: Asset-1234567890
  dmi.chassis.type: 3
  dmi.chassis.vendor: Chassis Manufacture
  dmi.chassis.version: Chassis Version
  dmi.modalias: 
dmi:bvnAmericanMegatrendsInc.:bvr1801:bd06/22/2011:svnSystemmanufacturer:pnSystemProductName:pvrSystemVersion:rvnASUSTeKComputerINC.:rnP8H67-MEVO:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
  dmi.product.family: To be filled by O.E.M.
  dmi.product.name: System Product Name
  dmi.product.version: System Version
  dmi.sys.vendor: System manufacturer
  modified.conffile..etc.apparmor.d.usr.bin.firefox: [modified]
  mtime.conffile..etc.apparmor.d.usr.bin.firefox: 2018-01-06T20:07:26.977391

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1741768/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to