touch-packages team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

Public bug reported:

In a recent test run, the following denial was observed:
Oct  1 18:13:05 ubuntu-phablet kernel: [  130.968843] (3)[6618:com.ubuntu.yelp]type=1400 audit(1412187185.260:127): apparmor="DENIED" operation="mkdir" profile="com.ubuntu.yelp_yelp_1.0.26" name="/home/phablet/.local/share/unity-scopes/com.ubuntu.yelp_yelp/" pid=6618 comm="com.ubuntu.yelp" requested_mask="c" denied_mask="c" fsuid=32011 ouid=32011

Yelp is using the wrong directory. It is using:
@{HOME}/.local/share/unity-scopes/@{APP_PKGNAME}_@{APP_APPNAME}

but apparmor policy says to use:
@{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}

Note: this is a different bug than the one dealing with XDG_RUNTIME_DIR
paths, where we do use @{APP_APPNAME}.

Adding rtm14 tag with High priority since this seems to affect scopes in
the store. Please readjust as necessary.

** Affects: unity-scopes-api (Ubuntu)
     Importance: High
         Status: New


** Tags: application-confinement rtm14

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unity-scopes-api in
Ubuntu.
https://bugs.launchpad.net/bugs/1376416

Title:
  apparmor denial for yelp

Status in “unity-scopes-api” package in Ubuntu:
  New

Bug description:
  In a recent test run, the following denial was observed:
  Oct  1 18:13:05 ubuntu-phablet kernel: [  130.968843] (3)[6618:com.ubuntu.yelp]type=1400 audit(1412187185.260:127): apparmor="DENIED" operation="mkdir" profile="com.ubuntu.yelp_yelp_1.0.26" name="/home/phablet/.local/share/unity-scopes/com.ubuntu.yelp_yelp/" pid=6618 comm="com.ubuntu.yelp" requested_mask="c" denied_mask="c" fsuid=32011 ouid=32011

  Yelp is using the wrong directory. It is using:
  @{HOME}/.local/share/unity-scopes/@{APP_PKGNAME}_@{APP_APPNAME}

  but apparmor policy says to use:
  @{HOME}/.local/share/unity-scopes/leaf-net/@{APP_PKGNAME}

  Note: this is a different bug than the one dealing with
  XDG_RUNTIME_DIR paths, where we do use @{APP_APPNAME}.

  Adding rtm14 tag with High priority since this seems to affect scopes
  in the store. Please readjust as necessary.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unity-scopes-api/+bug/1376416/+subscriptions