[Bug 1553712] Re: usr.bin.firefox apparmor profile blocks access to mounttracker

[Jean-Philippe Guérard]

** Description changed:

- When I launch Firefox with apparmor enabled, I get the following error:
+ When I launch Firefox with apparmor enabled, I get the following errors:
  
- Mar  6 11:03:27 tigreraye dbus[4663]: apparmor="DENIED"
- operation="dbus_method_call"  bus="session"
- path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker"
- member="ListMountableInfo" mask="send" name=":1.42" pid=11860
- label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=4834
- peer_label="unconfined"
+ Mar  6 13:21:19 tigreraye dbus[2570]: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member="ListMountableInfo" mask="send" name=":1.46" pid=6604 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=2781 peer_label="unconfined"
+ Mar  6 17:31:04 tigreraye dbus[4030]: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/gtk/Private/RemoteVolumeMonitor" interface="org.gtk.Private.RemoteVolumeMonitor" member="IsSupported" mask="send" name=":1.71" pid=4480 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=4327 peer_label="unconfined"
+ Mar  6 17:31:04 tigreraye dbus[4030]: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member="ListMounts" mask="send" name=":1.43" pid=4480 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=4206 peer_label="unconfined"
+ Mar  6 17:31:04 tigreraye dbus[4030]: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member="LookupMount" mask="send" name=":1.43" pid=4480 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=4206 peer_label="unconfined"
  
  Adding the following lines to the apparmor profile fixes the issue:
  
- dbus send bus=session path="/org/gtk/vfs/mounttracker"
- interface="org.gtk.vfs.MountTracker" member="ListMountableInfo",
+ dbus send bus=session path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member="ListMountableInfo",
+ dbus send bus=session path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member="ListMounts",
+ dbus send bus=session path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member="LookupMount",
+ dbus send bus=session path="/org/gtk/Private/RemoteVolumeMonitor" interface="org.gtk.Private.RemoteVolumeMonitor" member="IsSupported",

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1553712

Title:
  usr.bin.firefox apparmor profile blocks access to mounttracker

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1553712/+subscriptions