[Bug 632868] [NEW] apparmor prevent Firefox from loading Google Voice plugin

Launchpad Bug Tracker 632868 at bugs.launchpad.net
Wed Sep 8 03:58:40 UTC 2010 

You have been subscribed to a public bug:

Binary package hint: apparmor

I installed Google Voice plugin while I use the AppArmor profile of
Firefox. To make it works I had to add this :

  # Google Voice
  /opt/google/talkplugin/*.so mr,
  /opt/google/talkplugin/lib/*.so mr,
  /opt/google/talkplugin/GoogleTalkPlugin Uxr,

I think this should be added to the profile as this plugin will probably
be very popular because it allows to make free call to land lines.

Here is an extract of the log with the default AA profile (including
retries as I added some authorization to the profile) :

$ grep denied_mask /var/log/kern.log
Sep  5 14:45:54 simon-laptop kernel: [106066.802488] type=1503 audit(1283712354.787:46):  operation="open" pid=16649 parent=16645 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/libnpgoogletalk64.so"
Sep  5 14:45:54 simon-laptop kernel: [106066.803259] type=1503 audit(1283712354.787:47):  operation="open" pid=16649 parent=16645 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/libnpgoogletalk64.so"
Sep  5 14:45:54 simon-laptop kernel: [106066.805247] type=1503 audit(1283712354.787:48):  operation="open" pid=16649 parent=16645 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/libnpgtpo3dautoplugin.so"
Sep  5 14:45:54 simon-laptop kernel: [106066.805294] type=1503 audit(1283712354.787:49):  operation="open" pid=16649 parent=16645 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/libnpgtpo3dautoplugin.so"
Sep  5 14:48:25 simon-laptop kernel: [106217.723661] type=1503 audit(1283712505.710:53):  operation="open" pid=16811 parent=16807 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/libnpgoogletalk64.so"
Sep  5 14:48:25 simon-laptop kernel: [106217.723704] type=1503 audit(1283712505.710:54):  operation="open" pid=16811 parent=16807 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/libnpgoogletalk64.so"
Sep  5 14:48:25 simon-laptop kernel: [106217.724316] type=1503 audit(1283712505.710:55):  operation="open" pid=16811 parent=16807 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/lib/libCgGL.so"
Sep  5 14:48:53 simon-laptop kernel: [106245.157627] type=1503 audit(1283712533.137:59):  operation="open" pid=16848 parent=16844 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/opt/google/talkplugin/lib/libCgGL.so"
Sep  5 14:49:57 simon-laptop kernel: [106309.288246] type=1503 audit(1283712597.267:66):  operation="exec" pid=17002 parent=17001 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/opt/google/talkplugin/GoogleTalkPlugin"
Sep  5 14:51:24 simon-laptop kernel: [106396.050887] type=1503 audit(1283712684.030:70):  operation="exec" pid=17110 parent=17109 profile="/usr/lib/firefox-3.6.8/firefox-*bin" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/opt/google/talkplugin/GoogleTalkPlugin"


$ lsb_release -rd
Description:	Ubuntu 10.04.1 LTS
Release:	10.04

$ apt-cache policy apparmor-profiles firefox google-talkplugin
apparmor-profiles:
  Installed: 2.5-0ubuntu3
  Candidate: 2.5-0ubuntu3
  Version table:
 *** 2.5-0ubuntu3 0
        500 http://archive.ubuntu.com/ubuntu/ lucid/universe Packages
        100 /var/lib/dpkg/status
firefox:
  Installed: 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
  Candidate: 3.6.8+build1+nobinonly-0ubuntu0.10.04.1
  Version table:
 *** 3.6.8+build1+nobinonly-0ubuntu0.10.04.1 0
        500 http://archive.ubuntu.com/ubuntu/ lucid-updates/main Packages
        500 http://archive.ubuntu.com/ubuntu/ lucid-security/main Packages
        100 /var/lib/dpkg/status
     3.6.3+nobinonly-0ubuntu4 0
        500 http://archive.ubuntu.com/ubuntu/ lucid/main Packages
google-talkplugin:
  Installed: 1.5.1.0-1
  Candidate: 1.5.1.0-1
  Version table:
 *** 1.5.1.0-1 0
        500 http://dl.google.com/linux/talkplugin/deb/ stable/main Packages
        100 /var/lib/dpkg/status

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: apparmor-profiles 2.5-0ubuntu3
ProcVersionSignature: Ubuntu 2.6.32-25.43-generic 2.6.32.21+drm33.7
Uname: Linux 2.6.32-25-generic x86_64
ApparmorStatusOutput:
 Error: command /usr/sbin/apparmor_status failed with exit code 4: You do not have enough privilege to read the profile set.
 apparmor module is loaded.
Architecture: amd64
Date: Tue Sep  7 23:18:28 2010
Dependencies:
 
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
ProcEnviron:
 LANGUAGE=en
 LANG=en_CA.utf8
 SHELL=/bin/bash
SourcePackage: apparmor

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apparmor apport-bug lucid
-- 
apparmor prevent Firefox from loading Google Voice plugin
https://bugs.launchpad.net/bugs/632868
You received this bug notification because you are a member of Mozilla Bugs, which is subscribed to firefox in ubuntu.

More information about the Ubuntu-mozillateam-bugs mailing list