[Bug 633369] [NEW] apparmor profile denials with latest sun-java6

[Jamie Strandboge]

Public bug reported:

Binary package hint: firefox

With sun-java6-plugin 6.20dlj, apparmor causes the following denials:
[ 3405.519958] type=1503 audit(1283963411.764:34): operation="file_mmap" pid=7959 parent=7943 profile="/usr/lib/firefox-3.6.9/firefox-*bin//firefox_java" requested_mask="mr::" denied_mask="m::" fsuid=1000 ouid=1000 name="/home/jamie/.fontconfig/e13b20fdb08344e0e664864cc2ede53d-x86.cache-2"
[ 3405.526024] type=1503 audit(1283963411.772:35): operation="open" pid=7959 parent=7943 profile="/usr/lib/firefox-3.6.9/firefox-*bin//firefox_java" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/etc/debian_version"
[ 3405.526111] type=1503 audit(1283963411.772:36): operation="open" pid=7959 parent=7943 profile="/usr/lib/firefox-3.6.9/firefox-*bin//firefox_java" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/proc/loadavg"

Attached is a patch for firefox 9.10. It should also be applied to
10.04. Maverick will be fixed in the apparmor package.

** Affects: apparmor (Ubuntu)
     Importance: Medium
     Assignee: Jamie Strandboge (jdstrand)
         Status: Triaged

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: Invalid

** Affects: apparmor (Ubuntu Lucid)
     Importance: Undecided
         Status: Invalid

** Affects: firefox (Ubuntu Lucid)
     Importance: Undecided
         Status: Triaged

** Affects: apparmor (Ubuntu Maverick)
     Importance: Medium
     Assignee: Jamie Strandboge (jdstrand)
         Status: Triaged

** Affects: firefox (Ubuntu Maverick)
     Importance: Undecided
         Status: Invalid

** Affects: apparmor (Ubuntu Karmic)
     Importance: Undecided
         Status: Invalid

** Affects: firefox (Ubuntu Karmic)
     Importance: Undecided
         Status: Triaged

-- 
apparmor profile denials with latest sun-java6
https://bugs.launchpad.net/bugs/633369
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in ubuntu.