*** This bug is a duplicate of bug 1447311 ***
    https://bugs.launchpad.net/bugs/1447311

Public bug reported:

Testing oxide 1.9.1 on arale, I created a simple click package that
simply launches qmlview with the following bit of QML:

    import QtQuick 2.4
    import com.canonical.Oxide 1.9
    WebView {
        url: "http://example.org";
    }

The manifest for the app has policy groups "networking" and "webview",
and the policy version is 1.3.

When I launch the app, it fails to start, and the app’s log is the
following:

    [0910/101904:FATAL:zygote_host_impl_linux.cc(182)] Check failed:
process.IsValid(). Failed to launch zygote process

Looking into /var/log/syslog, I’m seeing the following denial:

    Sep 10 10:19:28 ubuntu-phablet kernel: [  320.255767] type=1400
audit(1441873168.850:197): apparmor="DENIED" operation="capable"
profile="testwebview.osomon_testwebview_0.1" pid=4281 comm="qmlscene"
capability=21  capname="sys_admin"

** Affects: oxide
     Importance: Undecided
         Status: New

** Affects: apparmor-easyprof-ubuntu (Ubuntu)
     Importance: Undecided
         Status: New

** Also affects: apparmor-easyprof-ubuntu (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1494176

Title:
  apparmor confined applications with a WebView get a denial for
  sys_admin capability

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1494176/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to