[apparmor] [profile] Firefox: DENIED "m" access to /home/user/.nv folder.

daniel curtis sidetripping at gmail.com
Fri Jan 27 16:18:07 UTC 2017


Hi

Unfortunately, after Firefox update to the 51.0.1 version, there are still
a new ones DENIED messages in the log files (I've tried to restart Firefox
several times and the result was the same all the time);

Jan 27 17:04:56 t4 kernel: [16012.980569] type=1400
audit(1485533096.203:54): apparmor="DENIED" operation="exec" parent=3761
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/usr/bin/lsb_release"
pid=3762 comm="firefox" requested_mask="x" denied_mask="x" fsuid=1000
ouid=0

Jan 27 17:05:54 t4 kernel: [16071.660586] type=1400
audit(1485533154.883:55): apparmor="DENIED" operation="exec" parent=3865
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/usr/bin/lsb_release"
pid=3866 comm="firefox" requested_mask="x" denied_mask="x" fsuid=1000
ouid=0

Jan 27 17:08:19 t4 kernel: [16216.348615] type=1400
audit(1485533299.571:56): apparmor="DENIED" operation="exec" parent=3964
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/usr/bin/lsb_release"
pid=3965 comm="firefox" requested_mask="x" denied_mask="x" fsuid=1000
ouid=0

Firefox seems to work OK, but there is one thing, which makes me wonder:
"fsuid=1000 ouid=0". Both values were always the same - 1000. Now, they are
different. What is the reason? The question is simple: should I add another
rule to the Firefox profile? For example:

/usr/bin/lsb_release mrix,

Or something like that? I knew there will be some "problem" after update.
What is your opinions?

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20170127/50a92742/attachment.html>


More information about the AppArmor mailing list