[Bug 1553763] [NEW] usr.bin.firefox apparmor profile blocks access to VFS services

[Jean-Philippe Guérard]

Public bug reported:

When I launch Firefox with apparmor enabled, I get the following errors:

Mar  6 17:31:04 tigreraye dbus[4030]: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/gtk/vfs/Daemon" interface="org.gtk.vfs.Daemon" member="ListMonitorImplementations" mask="send" name=":1.43" pid=4480 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=4206 peer_label="unconfined"
Mar  6 17:31:13 tigreraye dbus[4030]: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/org/gtk/vfs/metadata" interface="org.gtk.vfs.Metadata" member="Set" mask="send" name=":1.100" pid=4480 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=4437 peer_label="unconfined"

Adding the following lines to the apparmor profile fixes the issue:

dbus send bus=session path="/org/gtk/vfs/Daemon" interface="org.gtk.vfs.Daemon" member="ListMonitorImplementations",
dbus send bus=session path="/org/gtk/vfs/metadata" interface="org.gtk.vfs.Metadata" member="Set",

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1553763

Title:
   usr.bin.firefox apparmor profile blocks access to VFS services

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1553763/+subscriptions