touch-packages team mailing list archive

Thread
Date

[Bug 1347177] Re: Unconfined aggregating scope can't call confined child scope to get results

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: Jamie Strandboge <jamie@xxxxxxxxxx>
Date: Thu, 31 Jul 2014 14:57:23 -0000
Reply-to: Bug 1347177 <1347177@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: savilerow
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1347177

Title:
  Unconfined aggregating scope can't call confined child scope to get
  results

Status in The Savilerow project:
  Fix Released
Status in API for Unity scopes integration:
  Invalid
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Fix Released

Bug description:
  An unconfined scope is getting apparmor denials while getting results
  from a confined child scope.  The denials:

  Jul 22 17:06:40 ubuntu-phablet kernel: [30750.996517] type=1400
  audit(1406063200.136:2410): apparmor="DENIED" operation="connect"
  profile="com.canonical.scopes.etsy_etsy_1.0.9"
  name="/run/user/32011/zmq/unity-scope-shopping-r" pid=19097
  comm="com.canonical.s" requested_mask="rw" denied_mask="rw"
  fsuid=32011 ouid=32011

  The child scope has the template: ubuntu-scope-network and can run
  fine on its own

To manage notifications about this bug go to:
https://bugs.launchpad.net/savilerow/+bug/1347177/+subscriptions