Public bug reported:

This concerns apparmor 2.13.3-7ubuntu5 in Ubuntu focal.

Saw this during a Firefox test run:

May 29 17:25:32 test-ubuntu64 kernel: [  818.399967] audit: type=1400
audit(1590787532.023:69): apparmor="DENIED" operation="open"
profile="firefox" name="/run/user/1000/ICEauthority" pid=1791
comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

This comparison was interesting:

    $ ls -l ~/.ICEauthority /run/user/1000/ICEauthority 
    -rw------- 1 skunk skunk   0 May 29 17:43 /home/skunk/.ICEauthority
    -rw------- 1 skunk skunk 350 May 29 17:43 /run/user/1000/ICEauthority

Is the /run path a new canonical location for the ICEauthority file? The
X abstraction would need to know about it.

** Affects: apparmor (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: focal

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1881357

Title:
  abstractions/X needs new ICEauthority path

Status in apparmor package in Ubuntu:
  New

Bug description:
  This concerns apparmor 2.13.3-7ubuntu5 in Ubuntu focal.

  Saw this during a Firefox test run:

  May 29 17:25:32 test-ubuntu64 kernel: [  818.399967] audit: type=1400
  audit(1590787532.023:69): apparmor="DENIED" operation="open"
  profile="firefox" name="/run/user/1000/ICEauthority" pid=1791
  comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

  This comparison was interesting:

      $ ls -l ~/.ICEauthority /run/user/1000/ICEauthority 
      -rw------- 1 skunk skunk   0 May 29 17:43 /home/skunk/.ICEauthority
      -rw------- 1 skunk skunk 350 May 29 17:43 /run/user/1000/ICEauthority

  Is the /run path a new canonical location for the ICEauthority file?
  The X abstraction would need to know about it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1881357/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to