[Bug 611301] [NEW] apparmor denies firefox access to /etc/alternatives/mozilla-flashplugin

[Simon Déziel]

Public bug reported:

Binary package hint: firefox

The apparmor profile for /usr/bin/firefox denies access to
/etc/alternatives/mozilla-flashplugin. Here is an extract of kern.log :

Jul 29 11:40:55 simon-laptop kernel: [19883.527433] type=1400
audit(1280396455.096:59):  operation="getattr" pid=2129 parent=2125
profile="/usr/lib/firefox-3.6.8/firefox-*bin" name="/etc/alternatives
/mozilla-flashplugin" pid=2129 comm="firefox-bin" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0

I know that this profile is disabled by default but I activated it and I
think that Firefox should be able to read this file. I have attached a
patch that add this authorization to the AA profile of Firefox.

Generic info :

$ lsb_release -rd
Description:	Ubuntu 10.04.1 LTS
Release:	10.04

$ apt-cache policy firefox
firefox:
  Installed: 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
  Candidate: 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
  Version table:
 *** 3.6.8+build1+nobinonly-0ubuntu0.10.04.1 0
        500 http://archive.ubuntu.com/ubuntu/ lucid-updates/main Packages
        500 http://archive.ubuntu.com/ubuntu/ lucid-security/main Packages
        100 /var/lib/dpkg/status
     3.6.3+nobinonly-0ubuntu4 0
        500 http://archive.ubuntu.com/ubuntu/ lucid/main Packages

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: firefox 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
ProcVersionSignature: Ubuntu 2.6.35-12.17~lucid1-generic 2.6.35-rc6
Uname: Linux 2.6.35-12-generic x86_64
Architecture: amd64
Date: Thu Jul 29 15:15:17 2010
EcryptfsInUse: Yes
FirefoxPackages:
 firefox 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
 firefox-gnome-support 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
 firefox-branding 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
 abroswer N/A
 abrowser-branding N/A
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
ProcEnviron:
 LANGUAGE=en
 LANG=en_CA.utf8
 SHELL=/bin/bash
SourcePackage: firefox

** Affects: firefox (Ubuntu)
     Importance: Low
         Status: Triaged


** Tags: amd64 apparmor apport-bug lucid

-- 
apparmor denies firefox access to /etc/alternatives/mozilla-flashplugin
https://bugs.launchpad.net/bugs/611301
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in ubuntu.