desktop-packages team mailing list archive

[Jean-Philippe Guérard <1495248@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When apparmor is activated for Firefox, I get the following log
messages:

[28547.841769] audit: type=1400 audit(1442154214.608:109): apparmor="DENIED" operation="mknod" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/shm/shmfd-mSnoHU" pid=7425 comm
="firefox" requested_mask="c" denied_mask="c" fsuid=1111 ouid=1111

Both /run/shm/shmfd-* and /var/run/shm/shmfd-* are allowed, but not
/dev/shm/shmfd-*.

Changing :

owner /{,var/}run/shm/shmfd-* rw,

To:

owner /{dev,{,var/}run}/shm/shmfd-* rw,

seems to fix the issue.

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1495248

Title:
  usr.bin.firefox blocks /dev/shm

Status in firefox package in Ubuntu:
  New

Bug description:
  When apparmor is activated for Firefox, I get the following log
  messages:

  [28547.841769] audit: type=1400 audit(1442154214.608:109): apparmor="DENIED" operation="mknod" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" name="/dev/shm/shmfd-mSnoHU" pid=7425 comm
  ="firefox" requested_mask="c" denied_mask="c" fsuid=1111 ouid=1111

  Both /run/shm/shmfd-* and /var/run/shm/shmfd-* are allowed, but not
  /dev/shm/shmfd-*.

  Changing :

  owner /{,var/}run/shm/shmfd-* rw,

  To:

  owner /{dev,{,var/}run}/shm/shmfd-* rw,

  seems to fix the issue.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1495248/+subscriptions