[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
This bug was fixed in the package apparmor-easyprof-ubuntu - 15.10.3 --- apparmor-easyprof-ubuntu (15.10.3) wily; urgency=medium * ubuntu/unconfined: remove autopilot specific rules and use simpler '/** pix,' rule. This is possible because dbus-property-service no longer ships 'fakeenv' rules. This is only backportable on earlier releases if dbus-property-service in those releases has the same change. (LP: #1464341) -- Jamie Strandboge ja...@ubuntu.com Fri, 12 Jun 2015 09:59:18 -0500 ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: Fix Released Status in dbus-property-service package in Ubuntu: Fix Released Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
This bug was fixed in the package dbus-property-service - 0.8 --- dbus-property-service (0.8) wily; urgency=medium * click.rules: remove no longer used and overly complicated fakeenv rules (LP: #1464341) -- Jamie Strandboge ja...@ubuntu.com Fri, 12 Jun 2015 09:54:36 -0500 ** Changed in: dbus-property-service (Ubuntu) Status: In Progress = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: In Progress Status in dbus-property-service package in Ubuntu: Fix Released Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: Triaged = In Progress ** Changed in: dbus-property-service (Ubuntu) Status: Triaged = In Progress -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: In Progress Status in dbus-property-service package in Ubuntu: In Progress Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
** Branch linked: lp:~nskaggs/dbus-property-service/remove-fakeenv -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: Triaged Status in dbus-property-service package in Ubuntu: Triaged Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
None of the coreapps are using this; tests work fine without it. We should be safe to remove. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: Triaged Status in dbus-property-service package in Ubuntu: Triaged Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
There are autopilot rules in the unconfined template that will make the fix more complicated than I would like. I've talked to balloons and he is looking into the possibility of removing these. ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Status: New = Triaged ** Changed in: apparmor-easyprof-ubuntu (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: Triaged Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
The apparmor click rules have moved from under autopilot-touch to dbus- property-service. I believe the old fakenv rules can be removed completely. I'll test this to be sure. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: Triaged Status in dbus-property-service package in Ubuntu: Triaged Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
** Also affects: dbus-property-service (Ubuntu) Importance: Undecided Status: New ** Changed in: dbus-property-service (Ubuntu) Status: New = Triaged ** Changed in: dbus-property-service (Ubuntu) Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1464341 Title: Denial when running binaries in terminal app Status in apparmor-easyprof-ubuntu package in Ubuntu: Triaged Status in dbus-property-service package in Ubuntu: Triaged Bug description: Open terminal on device Make a typical bash shell script in your home directory Try and run it Get this:- bash: foo.sh: Permission denied. Apparmor denial in dmesg:- [26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED operation=exec profile=com.ubuntu.terminal_terminal_0.7.74 name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x denied_mask=x fsuid=32011 ouid=32011 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1464341] Re: Denial when running binaries in terminal app
dbus-property-service needs to be adjusted to have these removed from
click.rules before apparmor-easyprof-ubuntu can be updated:
# Allow writes to various (application-specific) XDG directories
owner @{HOME}/autopilot/fakeenv/*/.cache/@{APP_PKGNAME}/ rw, # subdir of
XDG_CACHE_HOME
owner @{HOME}/autopilot/fakeenv/*/.cache/@{APP_PKGNAME}/** mrwkl,
owner @{HOME}/autopilot/fakeenv/*/.config/@{APP_PKGNAME}/ rw, # subdir of
XDG_CONFIG_HOME
owner @{HOME}/autopilot/fakeenv/*/.config/@{APP_PKGNAME}/** mrwkl,
owner @{HOME}/autopilot/fakeenv/*/.local/share/@{APP_PKGNAME}/ rw, # subdir
of XDG_DATA_HOME
owner @{HOMEDIRS}/*/autopilot/fakeenv/*/.local/share/@{APP_PKGNAME}/**
mrwklix,
owner @{HOME}/autopilot/fakeenv/*/confined/@{APP_PKGNAME}/ rw, # subdir of
XDG_RUNTIME_DIR
owner @{HOME}/autopilot/fakeenv/*/confined/@{APP_PKGNAME}/** mrwkl,
balloons is verifying if this is safe to do at this time.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1464341
Title:
Denial when running binaries in terminal app
Status in apparmor-easyprof-ubuntu package in Ubuntu:
Triaged
Status in dbus-property-service package in Ubuntu:
Triaged
Bug description:
Open terminal on device
Make a typical bash shell script in your home directory
Try and run it
Get this:-
bash: foo.sh: Permission denied.
Apparmor denial in dmesg:-
[26531.600286] type=1400 audit(1434040394.724:247): apparmor=DENIED
operation=exec profile=com.ubuntu.terminal_terminal_0.7.74
name=/home/phablet/bin/in.sh pid=11131 comm=bash requested_mask=x
denied_mask=x fsuid=32011 ouid=32011
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1464341/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
