touch-packages team mailing list archive

[Launchpad Bug Tracker <1347177@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package apparmor-easyprof-ubuntu - 1.2.12

---------------
apparmor-easyprof-ubuntu (1.2.12) utopic; urgency=medium

  * ubuntu/1.2/ubuntu-scope-network: allow rw on zmq/*-r reply endpoints. The
    scopes-api has protections for malformed or non-UUID-matching replies, so
    use a glob here to allow aggregating scopes to work. (LP: #1347177)
 -- Jamie Strandboge <jamie@xxxxxxxxxx>   Wed, 23 Jul 2014 10:15:17 -0500

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1347177

Title:
  Unconfined aggregating scope can't call confined child scope to get
  results

Status in The Savilerow project:
  Confirmed
Status in API for Unity scopes integration:
  Invalid
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Fix Released

Bug description:
  An unconfined scope is getting apparmor denials while getting results
  from a confined child scope.  The denials:

  Jul 22 17:06:40 ubuntu-phablet kernel: [30750.996517] type=1400
  audit(1406063200.136:2410): apparmor="DENIED" operation="connect"
  profile="com.canonical.scopes.etsy_etsy_1.0.9"
  name="/run/user/32011/zmq/unity-scope-shopping-r" pid=19097
  comm="com.canonical.s" requested_mask="rw" denied_mask="rw"
  fsuid=32011 ouid=32011

  The child scope has the template: ubuntu-scope-network and can run
  fine on its own

To manage notifications about this bug go to:
https://bugs.launchpad.net/savilerow/+bug/1347177/+subscriptions