[Bug 2032992] Re: [snap] chromium snap does not allow to read symlinks to /usr/share/javascript

Thu Oct 26 12:46:59 UTC 2023

Launchpad has imported 17 comments from the remote bug at
https://bugzilla.mozilla.org/show_bug.cgi?id=1849961.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2023-08-24T09:10:23+00:00 Vladimir Petko wrote:

Created attachment 9350104
firefox-snap-info.txt

Steps to reproduce:

1. Install firefox snap 116.0.3-2  
snap install firefox
2. Install openjdk-21 documentation 
sudo apt install openjdk-21-doc
3. Browse API documentation 
firefox /usr/share/doc/openjdk-21-doc/api/index.html 

Actual results:

The search bar is inactive
Console contains
Loading failed for the <script> with source “file:///usr/share/doc/openjdk-21-jre-headless/api/script-dir/jquery-3.6.1.min.js”.

$ls -l /usr/share/doc/openjdk-21-jre-headless/api/script-dir/jquery-3.6.1.min.js
lrwxrwxrwx 1 root root 43 Mar 17 13:31 /usr/share/doc/openjdk-21-jre-headless/api/script-dir/jquery-3.6.1.min.js -> ../../../../javascript/jquery/jquery.min.js

cat /usr/share/doc/openjdk-21-jre-headless/api/script-dir/jquery-3.6.1.min.js
prints the file contents

Downloaded version of firefox opens documentation with active search bar and no javascript errors
/tmp/firefox/firefox /usr/share/doc/openjdk-21-doc/api/index.html 

Expected results:

Firefox snap should be able to follow symlink and correctly load OpenJDK
API documentation.

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/0

------------------------------------------------------------------------
On 2023-08-25T12:23:39+00:00 Snegritas wrote:

Hello! I have tried to reproduce the issue with firefox
118.0a1(2023-08-25) on Ubuntu 22.04, unfortunately I wasn't able to
reproduce the issue on my end. Could you please answer the following
questions in order to further investigate this issue.

1. Does this issue happen with a new profile? Here is a link on how to create one: https://support.mozilla.org/en-US/kb/profile-manager-create-remove-switch-firefox-profiles
2. Does this issue happen in the latest nightly? Here is a link from where you can download it: https://www.mozilla.org/en-US/firefox/channel/desktop/
3. Do you have any addons installed? If yes could you please list them?

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/6

------------------------------------------------------------------------
On 2023-08-27T20:10:25+00:00 Vladimir Petko wrote:

Hi,

Latest version of firefox downloaded from the site works fine.

This bug relates to the snap version of firefox that does not have sufficient permissions to follow symlinks.
Please install firefox via `snap install firefox` (see steps to reproduce).

Best Regards, 
 Vladimir.

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/7

------------------------------------------------------------------------
On 2023-09-25T00:41:35+00:00 Release-mgmt-account-bot wrote:

The [Bugbug](https://github.com/mozilla/bugbug/) bot thinks this bug
should belong to the 'Firefox Build System::Third Party Packaging'
component, and is moving the bug to that component. Please correct in
case you think the bot is wrong.

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/9

------------------------------------------------------------------------
On 2023-09-26T10:18:33+00:00 Snegritas wrote:

Hello Vladimir! I have installed firefox with snap install but on the
second step I can't install the program. Could you please provide a
video or a screen shot with the issue?

Thank you!

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/10

------------------------------------------------------------------------
On 2023-09-26T20:00:34+00:00 Vladimir Petko wrote:

Created attachment 9355158
test.png

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/11

------------------------------------------------------------------------
On 2023-09-26T20:01:26+00:00 Vladimir Petko wrote:

Please use `sudo apt install openjdk-17-doc` as the second step (see
screenshot).

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/12

------------------------------------------------------------------------
On 2023-10-13T13:44:16+00:00 Release-mgmt-account-bot wrote:

The severity field is not set for this bug.
:gerard-majax, could you have a look please?

For more information, please visit [BugBot
documentation](https://wiki.mozilla.org/BugBot#workflow.2Fno_severity.py).

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/13

------------------------------------------------------------------------
On 2023-10-13T13:48:22+00:00 Lissyx+mozillians wrote:

Vladimir, please refer to your colleagues.

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/14

------------------------------------------------------------------------
On 2023-10-13T13:48:59+00:00 Lissyx+mozillians wrote:

This is just another case of directory being blocked by snap sandbox

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/15

------------------------------------------------------------------------
On 2023-10-13T13:50:16+00:00 Lissyx+mozillians wrote:

Looks like this is another case
https://bugzilla.mozilla.org/show_bug.cgi?id=1768303#c12

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/16

------------------------------------------------------------------------
On 2023-10-25T08:14:34+00:00 Sebastien Bacher wrote:

Right, it seems another case of directory not available from within the
sandbox, we should perhaps consider allowing read access to
/usr/share/doc

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/17

------------------------------------------------------------------------
On 2023-10-26T09:22:01+00:00 Lissyx+mozillians wrote:

*** This bug has been marked as a duplicate of bug 1768303 ***

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/18

------------------------------------------------------------------------
On 2023-10-26T09:27:28+00:00 Lissyx+mozillians wrote:

(In reply to seb128 from comment #11)
> Right, it seems another case of directory not available from within the sandbox, we should perhaps consider allowing read access to /usr/share/doc

`/usr/share/doc` is already allowed:
https://github.com/snapcore/snapd/blob/4dba256bd08383a966d414a75e8ffbd5e172b355/interfaces/builtin/system_packages_doc.go#L88-L92

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/19

------------------------------------------------------------------------
On 2023-10-26T09:31:41+00:00 Lissyx+mozillians wrote:

Ok, the problem is that the symlink is outside what is allowed:
```
$ alex at portable-alex:~$ realpath /usr/share/doc/openjdk-21-jre-headless/api/script-dir/jquery-3.6.1.min.js 
/usr/share/javascript/jquery/jquery.min.js
```
I'm not really sure what we can do there ...

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/20

------------------------------------------------------------------------
On 2023-10-26T09:49:31+00:00 Sebastien Bacher wrote:

There isn't really a solution there until snapd or portal provide a
framework to be able to access the content of random directories outide
of the confinement space...

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/21

------------------------------------------------------------------------
On 2023-10-26T09:56:33+00:00 Nathan Teodosio wrote:

There is a merge request for allowing /usr/share/javascript/jquery/,
https://github.com/snapcore/snapd/pull/13130.

Reply at: https://bugs.launchpad.net/ubuntu/+source/chromium-
browser/+bug/2032992/comments/22

** Changed in: firefox
       Status: Unknown => Confirmed

** Bug watch added: Mozilla Bugzilla #1768303
   https://bugzilla.mozilla.org/show_bug.cgi?id=1768303

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/2032992

Title:
  [snap] chromium snap does not allow to read symlinks to
  /usr/share/javascript

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/2032992/+subscriptions