[apparmor] [Bug 933440] Re: AppArmor profile (in enforce mode) breaks skype
Ivan Frederiks
933440 at bugs.launchpad.net
Thu May 3 17:58:45 UTC 2012
@Jamie Strandboge
I tried to use proposed1. It's almost fine, but:
1. one has to add ssl_certs abstraction
2. looks like skype _requires_ "owner /dev/shm/pulse-shm* m," and "/dev/snd/* m," to play audio.
3. skype sometimes tries to access .mozilla, but I think it's up to end-user to allow or deny this.
4. probably one needs to add something like "owner @{PROC}/[0-9]*/fd/ r,"
Concerning 'mmap a file executable': do you think that it is dangerous?
--
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor Profiles.
https://bugs.launchpad.net/bugs/933440
Title:
AppArmor profile (in enforce mode) breaks skype
Status in AppArmor Profiles:
Confirmed
Status in “apparmor” package in Ubuntu:
Incomplete
Bug description:
When usr.bin.skype profile from apparmor-profiles package is enabled
skype is unable to start.
I use Ubuntu 11.04 i386
apt-cache policy apparmor-profiles
apparmor-profiles:
Installed: 2.6.1-0ubuntu3
Candidate: 2.6.1-0ubuntu3
Version table:
*** 2.6.1-0ubuntu3 0
500 http://de.archive.ubuntu.com/ubuntu/ natty/universe i386 Packages
100 /var/lib/dpkg/status
apt-cache policy skype
skype:
Installed: 2.2.0.35-0natty1
Candidate: 2.2.0.35-0natty1
Version table:
*** 2.2.0.35-0natty1 0
500 http://archive.canonical.com/ubuntu/ natty/partner i386 Packages
100 /var/lib/dpkg/status
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor-profiles/+bug/933440/+subscriptions
More information about the AppArmor
mailing list