[apparmor] Weird problem with LD_LIBRARY_PATH

[Aaron Lewis]

Too bad, there's no "denied" messages in syslog

Not with aa-enforce or aa-complain.

Also, I'm running old version of libicuXX.so.VERSION (Arch Linux)

On Tue, May 6, 2014 at 1:38 PM, Seth Arnold <seth.arnold at canonical.com> wrote:
> On Tue, May 06, 2014 at 08:40:09AM +0800, Aaron Lewis wrote:
>>
>> %> cat /opt/chromium/chromium/chromium.sh
>> #!/bin/bash
>>
>> export LD_LIBRARY_PATH=/opt/chromium/libs/
>> /opt/chromium/chromium/chromium "$@"
>>
>> When I enforce the opt.chromium.chromium.chromium.sh policy, it says:
>> (No problem running it if aa is diabled)
>> %> /opt/chromium/chromium/chromium.sh
>> /opt/chromium/chromium/chromium: error while loading shared libraries:
>> libicui18n.so.52: cannot open shared object file: No such file or
>> directory
>>
>> But I already have: "/opt/chromium/libs/* rm," in that profile, anything wrong?
>>
>> That profile is for "/opt/chromium/chromium/chromium", not the script though
>
> LD_LIBRARY_PATH adds to the library path, it doesn't replace it entirely;
> on my system, this library is in /usr/lib/x86_64-linux-gnu/libicui18n.so.52.1
>
> Does this library exist in /opt/chromium/libs/ or elsewhere in a path
> referenced via /etc/ld.so.conf or one of ld.so's defaults?
> Does your profile allow 'rm' access to this library?
>
> Hopefully your system logs will contain more information; if not in
> /var/log/syslog then perhaps in /var/log/audit/audit.log.
>
> Thanks
>
> --
> AppArmor mailing list
> AppArmor at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
>



-- 
Best Regards,
Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/
Finger Print:   9F67 391B B770 8FF6 99DC  D92D 87F6 2602 1371 4D33