[Bug 570128] Re: apparmor profile blocks Sun Java plugin

Launchpad Bug Tracker 570128 at bugs.launchpad.net
Thu Jul 22 14:47:18 UTC 2010


This bug was fixed in the package firefox-3.5 - 3.6.7+build2+nobinonly-
0ubuntu0.9.10.1

---------------
firefox-3.5 (3.6.7+build2+nobinonly-0ubuntu0.9.10.1) karmic-security; urgency=low

  [ Chris Coulson <chris.coulson at canonical.com> ]
  * New major upstream release v3.6.7 (FIREFOX_3_6_7_BUILD2)
    - see USN-930-1

  * Switch to using unversioned binaries. This means that firefox and
    firefox-gnome-support are no longer meta-packages depending on the latest
    versioned binary packages, but they ship the binary components. Convert
    firefox-3.5* packages to meta packages which pull in the unversioned binaries
    to ensure a smooth upgrade path
    - update debian/control
    - rename debian/firefox-3.5-dev.install => debian/firefox-dev.install
    - rename debian/firefox-3.5-dev.links => debian/firefox-dev.links
    - rename debian/firefox-3.5-final.desktop => debian/firefox-final.desktop
    - rename debian/firefox-3.5-gnome-support.install => debian/firefox-gnome-support.install
    - rename debian/firefox-3.5-gnome-support.postinst.in => debian/firefox-gnome-support.postinst
    - rename debian/firefox-3.5-minefield.desktop => debian/firefox-minefield.desktop
    - rename debian/firefox-3.5-restart-required.update-notifier => debian/firefox-restart-required.update-notifier
    - rename debian/firefox-3.5.dirs => debian/firefox.dirs
    - rename debian/firefox-3.5.install => debian/firefox.install
    - rename debian/firefox-3.5.links => debian/firefox.links
    - rename debian/firefox-3.5.menu => debian/firefox.menu
    - rename debian/firefox-3.5.postinst.in => debian/firefox.postinst.in
    - rename debian/firefox-3.5.postrm.in => debian/firefox.postrm.in
    - rename debian/firefox-3.5.preinst.in => debian/firefox.preinst.in
    - rename debian/firefox-3.5.prerm => debian/firefox.prerm.in
    - rename debian/abrowser-3.5.desktop => debian/abrowser.desktop
    - update Icon name in debian/firefox-final.desktop
    - update Icon name in debian/abrowser.desktop
    - update Icon and Exec fields in debian/firefox-minefield.desktop
    - update Name and Description in debian/firefox-restart-required.update-notifier
    - update debian/firefox.links to not create versioned link in /usr/bin
    - update fields in debian/firefox.menu
    - update debian/firefox.prerm.in
  * Use Namoroka instead of Shiretoko as brand name and use it for snapshots.
    Name it Namoroka in the Preferred Application UI too
    - update debian/firefox-3.6-shiretoko.desktop => debian/firefox-namoroka.desktop
    - update debian/firefox.xml
    - update debian/rules
  * Implement MIN_SYS_DEPS approach that does not use system xulrunner
    and only a minimal set of system dependencies.
    + drop patches not required anymore:
      - delete debian/patches/dont_depend_on_nspr_sources.patch
      - update debian/patches/series
    + move .install lines that depend on whether MIN_SYS_DEPS is used or not
      to debian/rules in ifneq (,$(MIN_SYS_DEPS)) blocks
      - update debian/rules
      - update debian/firefox.install
    + ship gnome support .so's inside of the main package, but keep dependencies in
      the (now empty) gnome-support package; to achieve this, we first install
      the gnome support files in the -gnome-support package and move them to the
      main package _after_ shlib depends where generated
      - update debian/rules
    + do not build-depend on xulrunner dev package anymore; local xulrunner builds
      with MIN_SYS_DEPS=0 should still work though
      - update debian/control
    + fix firefox.sh to handle all-static build
      - update debian/firefox.sh.in
  * Add libiw-dev to build-depends to fix build failure
    - update debian/control
  * Add libnotify-dev to build-depends
    - update debian/control
  * Add patch for armv7 support
    - add debian/patches/bz532198_lp488354_ns_invokebyindex_not_thumb2_safe.patch
    - update debian/patches/series
  * Fix LP: #428306 - default search engines are removed and readded (keywords
    wiped) with upgrade
    - add debian/patches/bz534663_attXXX_normalize_distribution_searchplugins.patch
    - update debian/patches/series
  * Add ability to set a preferred plugin for a given mime-type
    - add debian/patches/bzXXX_plugin_for_mimetype_pref.patch
    - update debian/patches/series
  * Enable NetworkManager integration for proper offline detection
    - update debian/firefox.js
  * Update profile migration tool for new version
    - update debian/migrator/main.c
  * Fix LP: #520963 - sysprefs not honoured since firefox is built without
    system xulrunner; resurrect the patch we ship in xulrunner
    - add debian/patches/add_syspref_dir.patch
    - update debian/patches/series
  * Drop patches applied upstream
  * Update / rebase patches
    - update debian/patches/awesome_browser_branding_install.patch
    - update debian/patches/browser_branding.patch
    - update debian/patches/bz460917_att350845_reload_new_plugins.patch
    - update debian/patches/bz515232_att399338_distro_locale_searchplugins.patch
    - update debian/patches/lp185622_system_path_default_browser.patch
    - update debian/patches/ubuntu_bookmarks.patch
    - update debian/patches/ubuntu_no_app_updates.patch
    - udpate debian/patches/defer_syslibs_bumps_to_sru.patch
  * Add a cairo LCD filter to use Freetype LCD colour filtering features,
    based on the same patch applied to our system cairo package. Thanks to
    Marc Deslauriers for helping to make this work
    - add debian/patches/lp512615_cairo_lcd_filter.patch
    - update debian/patches/series
  * Fix LP: #518422 - Firefox does not start with certain addons installed;
    don't normalize paths for xpti.dat
    - add debian/patches/lp518422.patch
    - update debian/series
  * Fix LP: #548866 - forgets middlemouse.contentLoadURL on upgrade; add patch
    from xulrunner-1.9
    - update debian/patches/series
    - add debian/patches/lp548866_bz467766_att351173-dont-reset-user-prefs-on-upgrade.patch
  * Update rosetta template name to firefox-3.6
    - update debian/translation-support/install.rdf.in
  * Provide extra translations in desktop files
    - update debian/firefox-final.desktop
  * Ship different AppArmor profiles for different releases:
    - move usr.bin.firefox.apparmor.in to usr.bin.firefox.apparmor.9.10
    - add usr.bin.firefox.apparmor.10.04
    - debian/rules: ship AppArmor profile based on release:
      + add DISTRIB, DISTRIB_VERSION_MAJOR and DISTRIB_VERSION_MINOR
      + ship 9.10 profile for Karmic and under and 10.04 profile for Lucid
        and later
  * Move aside the old firefox-3.5 AppArmor profile and remove profile from
    dailies on upgrades
    - update debian/firefox.postinst.in
  * Disable the AppArmor profile on new installs, installs where the last modified
    profile is disabled and upgrades to this version
    - update debian/firefox.preinst.in
  * Add CMDNAME_USER feature to overwrite cmdname for abrowser in run-mozilla.sh
    - add debian/patches/abrowser_run_mozilla.patch
    - update debian/patches/series
  * Resurrect the patch used in xulrunner to implement support for locking preferences
    - add debian/patches/bz467738_att351145_lockPref_everywhere.patch
    - update debian/patches/series
  * Handle the system preferences moving location and beween packages during
    the upgrade - migrate the old settings to the new location if they have
    customisations already (and keep a backup of the new settings). Delete the
    old settings if they haven't been customised by the system administrator
    - add debian/firefox-3.5.preinst
    - update debian/firefox.postinst.in
  * If the previous customised system configuration from 3.0 is retained
    during the upgrade, ensure that new preferenes defined in the stock 3.6
    configuration are added to the existing migrated configuration
    - update debian/firefox.postinst.in
  * Enable PIE build for stronger security
    - update debian/rules
    - update debian/control

  [ Jamie Strandboge <jamie at ubuntu.com> ]
  * debian/firefox.preinst.in:
    - adjust version check for the version in karmic release
    - disable if firefox-3.5 profile is disabled
  * Apparmor:
    - allow ixr access to /usr/lib/xulrunner-*/plugin-container for xul builds
    - finetune Adobe Reader access (LP: #570337)
    - silence noisy denial on /boot/vmlinuz* and /boot/initrd.img* caused by
      readlinking symlinks in / (LP: #571761)
    - allow 'm' for java's 'classes.jsa' file (LP: #574459)
    - transition to firefox_java on Sun's jre/bin/java_vm too (LP: #570128)
    - allow Uxr for gnome-codec-install (LP: #577097)
 -- Chris Coulson <chris.coulson at canonical.com>   Thu, 15 Jul 2010 23:12:15 +0100

** Changed in: firefox-3.5 (Ubuntu Karmic)
       Status: Fix Committed => Fix Released

-- 
apparmor profile blocks Sun Java plugin
https://bugs.launchpad.net/bugs/570128
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in ubuntu.




More information about the Ubuntu-mozillateam-bugs mailing list