[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Hello Thomas. Today, I noticed next entry - related with Firefox - in a log files. I'm wondering whether to add this rule, because it's related to the ScreenSaver, which seems to be pretty strange. However a log entry looks this way; ✓ Jun 3 11:45:19 t1aa-kernel dbus[1473]: apparmor="DENIED"

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@anoda I wrote back via #1656065. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659988 Title: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Hello Thomas. Yes, I think you're right; "Apparmor log messages sometimes occur for special tasks." By the way - today I have again an issue (this is happening very often) with the plugin-container (Chrome_ChildThr) segfault. Suddenly, Firefox started to slow down, system also, audio was looping

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Patch attached fixes a lot, could we have it incorporated yet? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659988 Title: Firefox apparmor profile: /usr/bin/python3: error while loading shared

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

[Typo fixed]: I don't get why especially a major browser can't have its apparmor profile enabled by default. I get that there is a reason for that, however. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@anoda Yes, on every release of Firefox it is possible that it uses something which is new to the apparmor profile. However, Firefox somehow heals itself in most cases. I don't get why especially a major browser can't have its apparmor profile enabled by itself. I get that there is a reason for

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@anoda Btw: Apparmor log messages sometimes occur for special tasks. Like playing a youtube video, opening a file on disk, etc. Maybe that explains that you see some of these log entries very seldom. -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Hi Thomas. Firstly; I would like to thank You for all your work. I've had the same issues with Firefox 53. version running on 16.04 LTS Release (see: ). There was many DENIED entries in log files, such as, /var/log/kern.log and

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Here's the full version of VERSION 9 ** Attachment added: "usr.bin.firefox_patched" https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1659988/+attachment/4821323/+files/usr.bin.firefox_patched -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Found another entry in syslog (when starting FF): Feb 18 06:45:15 lat61 kernel: [ 1123.988918] audit: type=1400 audit(1487396715.969:78): apparmor="DENIED" operation="file_mmap" profile="/usr/lib/firefox/firefox{,*[^s][^h]}//lsb_release" name="/usr/bin/python3.5" pid=4722 comm="lsb_release"

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@Thomas The official firefox package update issued yesterday fixes my problem (on Firefox 51.0.1, Ubuntu 16.10). Anyway, the usr.bin.firefox apparmor file supplied is quite different from the patched one you shared here with us (and which worked as well). Thank you Thomas again, the bug is

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@anoda Got it. Maybe someone else who also uses 12.04 does the porting. For instance, I don't feel responsible for that (I'm not the package maintainer...). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Hi Thomas. Thanks for a patch, but as I mentioned it earlier; I'm using 12.04 LTS (but preparing to do an update, because of EoL etc.) so I can't use this patch for now in view of, for example: dbus (send) bus=session [...] rules and so on. (As already mentioned; post # 35.) Using

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

And here's the full version with patch VERSION 8 applied. (see https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1659988/comments/21 how to use it). ** Attachment added: "usr.bin.firefox_patched"

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@anoda Yes, only the black/white tab issue got fixed with the update which officially got released. Here's a new patch against the official NEW apparmor profile taken from ubuntu 16.04. Patch VERSION 8 (please name the version when you reference it somewhere). ** Patch added:

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Hi Thomas. This update was available yesterday (at least for 12.04 LTS Release) and there was only one rule added: owner /{dev,run}/shm/org.chromium.* rwk, Which - as I already mentioned - added this a few months ago. (Basically, last year.) So, for me, this update changes nothing. (See:

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@anoda Today, the maintainers announced a bugfix release which at least is supposed to fix the "black/white tab issue": https://bugs.launchpad.net/bugs/1659922 They backported it for a release for 12.04, too. I'm not sure if they applied all the rules FF actually requires, or just a subset of

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Hi Thomas. Yes, you're right: "the apparmor profile shipped with ubuntu 12.04 is different from that version". I'm using 12.04 LTS Release and after Firefox has been updated to the 49/50/51 versions, I've had to add some rules to the existing Firefox profile (please see:

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@wfhammond 12.04: My usr.bin.firefox_patched originates from FF package which is shipped with ubuntu 16.04. It is very likely that the apparmor profile shipped with ubuntu 12.04 is different from that version. As a result, the patch seems not to be applicable. Still good to know for other

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@Thomas Mayer (thomas303) I previously reported (on another page from where I was pointed here) this problem in Ubuntu 12.04.5 LTS. Following suggestion I took the full profile version 7. I did confirm that the problem was apparmor. However with usr.bin.firefox_patched it began throwing

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@Thomas Mayer (thomas303) Thanks. I don't want to file a new ticket because I think the problem is linked to this one. But I try you patch No. 7, and after that I will see. Thank you once more. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

full profile in VERSION 7 ** Attachment added: "usr.bin.firefox_patched" https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1659988/+attachment/4811650/+files/usr.bin.firefox_patched -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Patch VERSION 7 Also covers bug #1553763 (org.gtk.vfs.Metadata was still missing). ** Patch added: "usr.bin.firefox.patch" https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1659988/+attachment/4811649/+files/usr.bin.firefox.patch -- You received this bug notification because you are

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

** Changed in: firefox (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659988 Title: Firefox apparmor profile: /usr/bin/python3: error while loading shared

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@blantonradford Thanks for reporting back. Please report back in bug #1643200, which is the right place for black/white tabs. I assume that your old version of Session Manager was incompatible to E10S, which is why firefox did not enable it, which is why it worked. If Session Manager 0.8.1.13

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@sziraki.tamas I experienced myself that reading from / writing to files does not always work, depending on the chosen path. Is that your problem? To some extent, I think this is intentional: If firefox could read/write to any path/file you have permissions as a user, that would render most of

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Thomas, I believe I was already on FF 51.0.1, but after my Session Manager addon updated to 0.8.1.13, I began having the issue where everything from the Internet would display as black and white rectangles. I believe this happened immediately, but I can't be sure as I was chasing a separate

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

@Thomas Mayer (thomas303) Using your profile in #21, also, I take FF in enforce mode but partly always fall back to unconfined mode while the apparmor_status shows the complete FF in enforced mode. The download and upload only to and from a special folder does not work. Part of kern.log: Jan

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

** This bug is no longer a duplicate of bug 1659922 Firefox 51.0.1 does not display pages/shows blank pages. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659988 Title: Firefox apparmor

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Sorry, probably I wasn't clear enough: as I said, the problem (white rendering of web pages) showed up after the update to Firefox 51.0.1 Excluding it from Apparmor, Firefox became usable. Then, applying

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @roberto-colnaghi Thanks for reporting back. I thought you were affected by the black/white tabs, too. If not, Firefox should be usable at least (and indeed not be broken). Which problem exactly did the

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @thomas303 Thank you very much! The system was not broken, because I disabled apparmor for Firefox as you said in the opening post (altough you intended it just for testing). Anyway, your instructions were

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @roberto-colnaghi Indeed, python 3.5 dependency is not the cause for white/black tabs. But the patch fixes that, too. It fixes every apparmor blocking I'm aware of in terms of firefox. -- You received

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @roberto-colnaghi Not exactly. The patch is against the apparmor profile of FF only. Attached, I send the full version of a patched apparmor profile (patched with VERSION 6) You can even leave the

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @thomas303 I can't apply the patch, it's a production machine. Besides, I don't understand which file has to be patched (I figured it was /usr/bin/firefox, but it doesn't contain any of the words found in

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @roberto-colnaghi Please try out VERSION 6 of the patch. I think it fixes the [GFX1] issues, too. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @roberto-colnaghi Ah, my error. Thought this was a new issue. It even gets better: The person who posted these [GFX1]: Failed 2 buffer db=0 dw=0 for 0, 0, 1920, 876 errors was me. And from my side, I

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @roberto-colnaghi I had similar issues as well. These have all gone in my case after applying my patch. I'll post a comment in bug #1643200, eventually some of the affected users can test it. -- You

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Just my 2 cents: we had the same problem here after the Firefox 51.0.1 update (just one machine is affected anyway, the others updated with no problem). The error message is NOT related to python, but I

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Patch VERSION 6. Supposed to fix issues - 1660287 apparmor blocking VFS related operations - 1660314 apparmor blocking recently added files regression potential: FF now exposes some other issues like:

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Patch VERSION 5. Here's a new version of the patch which also fixes: - 1660287 Apparmor blocking FF to access org.gtk.vfs.Daemon and Mount ** Patch added: "usr.bin.firefox.patch"

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Patch VERSION 4. Here's a new version of the patch which also fixes: - 1660272 Apparmor blocking Freedesktop interfaces on video playback - 1660268 Apparmor blocking access to

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Related or duplicate: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1627239 I'm optimistic that my patch fixes that as well. -- You received this bug notification because you are a member of

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 The patch also fixes - 1660086 apparmor blocking /usr/share/distro-info/debian.csv -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 I think this issue is not exactly a duplicate of bug #1659922. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 @chrisccoulson Thanks. Please note that my patch is supposed to fix issues - 1659922 apparmor blocking /dev/shm/org.chromium.[...] - 1659988 apparmor blocking python 3.5 - 1495248 apparmor blocking blocks

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

*** This bug is a duplicate of bug 1659922 *** https://bugs.launchpad.net/bugs/1659922 Thanks, will take a look at that after the weekend ** This bug has been marked a duplicate of bug 1659922 Firefox 51.0.1 после обновления в Ubuntu 16.04 x32 не отображает содержимое сайтов -- You

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: firefox (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1659988 Title:

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

The attachment "usr.bin.firefox.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

I fixed all the issues now. Now the apparmor profile works: - console output remains silent - nothing is logged to /var/log/syslog - firefox renders content again in tabs Tested with ubuntu 16.04 (up-to-date) and firefox 51.0.1 Please reread the patch carefully in terms of security. I think I

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

My test was wrong (had another instance open with profile disabled) The patch still does not fix the problem with white/black tabs, not rendering any content. In syslog, I get: Jan 28 02:13:58 lat61 dbus[3005]: apparmor="DENIED" operation="dbus_method_call" bus="session"

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

In addition, I applied the suggestion from https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1495248. Now the apparmor profile works: - console output remains silent - nothing is logged to /var/log/syslog - firefox renders content again in tabs ** Patch added: "usr.bin.firefox.patch"

[Bug 1659988] Re: Firefox apparmor profile: /usr/bin/python3: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

The following patch mitigates the error message, but it's only a partial fix for the issue (which is white tabs). Note that I had python 3.5 installed whereas the apparmor profile only supported 3.0-3.4. So there's something else to do, and it also seems to be related to apparmor (because when