Comment 4 for bug 510644

Revision history for this message
Thomas Templin (coastgnu) wrote : Re: [Bug 510644] [NEW] usr.bin.firefox* profiles

Paket Name: apparmor-profiles
Release: Ubuntu 10.04 lucid
Version: 2.3.1+bzr1312-0ubuntu4

Symptom: /usr/lib/firefox-3.6pre/firefox.sh doesn't start

Syslog says:

---8<--- /var/log/syslog ---8<---
Jan 22 22:32:47 ubuntu kernel: [43190.440369] type=1503
audit(1264195967.220:55): operation="exec" pid=29293 parent=29286
profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="::x"
denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/expr"
Jan 22 22:45:57 ubuntu kernel: [43980.869839] type=1503
audit(1264196757.648:56): operation="exec" pid=557 parent=1
profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="::x"
denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/gdebi-gtk"
Jan 22 22:45:57 ubuntu kernel: [43981.078179] type=1503
audit(1264196757.856:57): operation="open" pid=29298 parent=29294
profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="::r"
denied_mask="::r" fsuid=1000 ouid=0 name="/etc/asound.conf"
Jan 22 22:45:57 ubuntu kernel: [43981.078203] type=1503
audit(1264196757.856:58): operation="open" pid=29298 parent=29294
profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="r::"
denied_mask="r::" fsuid=1000 ouid=1000 name="/home/username/.asoundrc"
Jan 22 22:45:57 ubuntu kernel: [43981.150445] type=1503
audit(1264196757.928:59): operation="open" pid=29298 parent=29294
profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="::r"
denied_mask="::r" fsuid=1000 ouid=0 name="/etc/asound.conf"
Jan 22 22:45:57 ubuntu kernel: [43981.150461] type=1503
audit(1264196757.928:60): operation="open" pid=29298 parent=29294
profile="/usr/lib/firefox-3.6*/firefox{,*[^s][^h]}" requested_mask="r::"
denied_mask="r::" fsuid=1000 ouid=1000 name="/home/username/.asoundrc"

--->8--- /var/log/syslog --->8---

In short:
 - denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/expr"
 - denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/gdebi-gtk"
 - denied_mask="::r" fsuid=1000 ouid=0 name="/etc/asound.conf"
 - denied_mask="r::" fsuid=1000 ouid=1000 name="/home/username/.asoundrc"
 - denied_mask="::r" fsuid=1000 ouid=0 name="/etc/asound.conf"
 - denied_mask="r::" fsuid=1000 ouid=1000 name="/home/username/.asoundrc"

regards,
thomas