[apparmor] Firefox (DENIED for /proc/*/task/) and plugin-container segfault.

[daniel curtis]

Hi

Today, after a couple hours of using Firefox (mostly YouTube and some
websites), suddenly browser closed unexpectedly (not by my action) and a
dialog box appeared related to Mozilla Crash Reporter; there was a message,
that reporter is disabled (which I did earlier - about a month ago) and no
crash report is available etc. - here's what I remember.

Anyway, [LastCrash] file (which can be found in ~/.mozilla/firefox/Crash
Reports/ directory) contains only: 1484142985. Just like all the files in
this directory. The last two folders; 'events' and 'pending' are empty.
However, system log files contains an interesting entries. For example
'/var/log/kern.log' file;

Jan 11 14:56:25 t4: [ 4161.295639] type=1400 audit(1484142985.517:46):
apparmor="DENIED" operation="open" parent=2818
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/proc/2818/task/"
pid=3253 comm="firefox" requested_mask="r" denied_mask="r" fsuid=1000
ouid=1000
Jan 11 14:56:25 t4 kernel: [ 4161.540727] Chrome_ChildThr[2890]:

segfault at 0 ip b76df673 sp b1efe9f0 error 6 in
plugin-container[b76d8000+42000]

As we can see, the first message contains DENIED action for
"/proc/2818/task/", right? It's the same issue, which is described right
here [1] (by me). The second entry is about 'plugin-container' - I have to
mention, that today was available an update for a flashplugin [2].

So, I've decided to write a message here - on AppArmor mailing list,
because of "/proc/*/task/" entry, but maybe the better place would be
Launchpad in view of 'plugin-container' segfault etc.

What do you think about this? Should I've create a bug report about
'plugin-container' segfault on Launchpad? If yes then what about AppArmor
message and "/proc/*/task/"?

Firefox: 50.1.0
Flash: 24.0.0.194ubuntu0.12.04.1
Linux: 3.2.0-120-generic-pae (3.2.79) i686

Best regards.
_____________
[1] https://lists.ubuntu.com/archives/apparmor/2016-December/010422.html
[2]
https://lists.ubuntu.com/archives/precise-changes/2017-January/026046.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20170111/6dae3a0f/attachment.html>