touch-packages team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

** Changed in: apparmor (Ubuntu)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1325050

Title:
  Profile usr.bin.firefox requires additional entries for nVidia
  hardware acceleration

Status in “apparmor” package in Ubuntu:
  Fix Released

Bug description:
  Release: Xubuntu 14.04
  Version: AppArmor 2.8.95~2430-0ubuntu5, FireFox 29.0+build1-0ubuntu0.14.04.2, nVidia proprietary driver 331.38

  What you expected to happen: Firefox to run without errors when
  setting usr.bin.firefox to enforce mode with the default profile.

  What happened instead: Constant "DENIED" errors were sent to
  /var/log/kern.log and FireFox was unable use hardware acceleration
  that the propreitary nVidia driver provides.

  Solution:

  The following additional rule must be added to usr.bin.firefox for
  proper operation when using the proprietary nVidia driver:

   owner @{HOME}/.nv/GLCache/ r,
   owner @{HOME}/.nv/GLCache/** rwk,
   @{PROC}/driver/nvidia/params r,
   @{PROC}/modules r,

  Jamie also said that @{PROC}/modules r, is likely not needed and could
  be replaced with deny /proc/modules r,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1325050/+subscriptions