[apparmor] [profile] Firefox 50: unavailable websites and many DENIED "/run/shm/org.chromium.*" log entries.

[Simon Deziel]

Hi Daniel,

On 2016-11-24 07:26 AM, daniel curtis wrote:
> Today I've had a problem with a Firefox ver 50.0. (Yesterday everything
> was okay). None of the website was loaded, even when www address was
> entered by me - nothing was displayed. Some of the websites, for
> example, duckduck.go were... black. There was so many (about 50 and
> more) entries in the log files, such as /var/log/kern.log:
> 
> Nov 24 13:06:36 t4 kernel: [  778.637504] type=1400
> audit(1479989196.846:1735): apparmor="DENIED" operation="mknod"
> parent=3733 profile="/usr/lib/firefox/firefox{,*[^s][^h]}"
> name="/run/shm/org.chromium.4wF9YL" pid=3764 comm=57656220436F6E74656E74
> requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

I can reproduce this on 16.04 with Firefox 50 also with e10s enabled.
For me, this started with FF 49, possibly after manually enabling e10s.

I accumulated quite a few rules in my local include for firefox and
submit those in [*]. You might want to grab a copy of the
"local/usr.bin.firefox" attachment from that bug.

Regards,
Simon

*: https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1533232\

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161124/a95887c5/attachment.pgp>