[Bug 1553711] [NEW] usr.bin.firefox apparmor profile block access to ICE sockets

[Jean-Philippe Guérard]

Public bug reported:

When I launch Firefox with apparmor enabled, I get the following error:

Mar  6 11:03:26 tigreraye kernel: [87610.428337] audit: type=1400
audit(1457258606.891:190): apparmor="DENIED" operation="connect"
profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=11860 comm="firefox"
family="unix" sock_type="stream" protocol=0 requested_mask="send receive
connect" denied_mask="send connect" addr=none peer_addr="@/tmp/.ICE-
unix/4748" peer="unconfined"

Adding the following lines to the apparmor profile fixes the issue:

unix (send, receive, connect) type=stream peer=(addr="@/tmp/.ICE-
unix/[0-9]*"),

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1553711

Title:
  usr.bin.firefox apparmor profile block access to ICE sockets

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1553711/+subscriptions