Solved it for me by editing /etc/apparmor.d/usr.bin.firefox on XSE
(Debian- & Xubutnu 18.04 LTS-based distro):
# per-user firefox configuration
#...
owner @{HOME}/.{firefox,mozilla}/**/gmp-widevinecdm/*/lib*so m,
That solved the problem when using Mz Firefox 100.0 (64-bit) and widevine
> these can be added fairly soon.
> https://gitlab.com/apparmor/apparmor/-/merge_requests/684
>
> though that is just landing it upstream and I am not sure when the
> next ubuntu upload will be
At least on 20.04, the profile comes from the firefox package, not the
apparmor one:
$ dpkg -S
> The second rule allows firefox to load and run code from that location.
> But doesn't allow firefox to write to it. So if there is malware [...]
That's correct for the added rule, but the profile also has
owner @{HOME}/.{firefox,mozilla}/** rw,
which means firefox _can_ write to that
On 10/25/20 5:15 AM, baptx wrote:
> I got it working by adding the 2 lines at the end of the
> /etc/apparmor.d/usr.bin.firefox just before the closing brack "}".
> Without these lines, I had to use another workaround by disabling
> Apparmor completely on Firefox with a command like "sudo
If someone does not have a subscription on netflix.com, it is also
possible to test Widevine without subscription on spotify.com.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1777070
Title:
I got it working by adding the 2 lines at the end of the
/etc/apparmor.d/usr.bin.firefox just before the closing brack "}".
Without these lines, I had to use another workaround by disabling
Apparmor completely on Firefox with a command like "sudo aa-complain
/usr/lib/firefox/firefox" or using the
Yes, this fixed it for me, too, but I couldn't get it to work, just on
the explanation above. Here's a little more detail. Follow the
instructions at:
https://forums.linuxmint.com/viewtopic.php?t=295649#p1644426
Worked on Firefox Quantum 69.0 (64-bit) on Ubuntu 18.04.3 LTS bionic.
Now I can
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: apparmor (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1777070
Title:
Arrgh... this is not a great way of working (malware could write to that
location and then load in code), but as it is what we've got, I've added
the rule to a forthcoming Firefox profile update.
Incidentally, Olivier, if you've got a line on who's responsible for the
Firefox profile there, it
And I can confirm that the additions to firefox's apparmor profile
suggested by Seth in comment #1 fix the crash of the CDM.
** Changed in: firefox (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
As far as I know firefox downloads and unpacks the widevine CDM in the
user's profile directory when it is needed to watch DRM-protected
videos. This is unlike chrome/chromium that install the widevine so
system-wide.
--
You received this bug notification because you are a member of Ubuntu
Bugs,
I think we're going to need more information on how this plugin got in
there in the first place. Being able to map a library in a user-writable
directory doesn't sound terribly safe...
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Thanks! I won't claim to understand what that change did, but adding
the two lines as requested does seem to resolve the issue. I opened up
Netflix and was able to watch, without the crash, and there wasn't any
new entries in syslog.
--
You received this bug notification because you are a
Hello Xav, thanks for the bug report.
Can you try adding some AppArmor rules to the firefox profile? I suspect
this may require a few iterations to find all the issues:
ptrace (trace) peer=@{profile_name},
@{HOME}/.mozilla/firefox/*/gmp-widevinecdm/*/lib*so m,
You can add these lines to the
** Tags added: bionic
** Also affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1777070
Title:
firefox plugin libwidevinecdm.so
15 matches
Mail list logo
