touch-packages team mailing list archive

[Frédéric Gagné <fredgagne3@xxxxxxxxx>]

I tried doing the patch manually on my system, and it seemed that the proposed fix wasn't enough. 
As suggested, I added these lines below line 14 :
  owner /{,var/}run/user/*/icedteaplugin-*/   rw,
  owner /{,var/}run/user/*/icedteaplugin-*/** rwk,

Yet that was not enough; the plugin still failed to run and I had the same complaints in kern.log.
However, adding the following line just under these two lines got it to work on my side.
  owner /usr/lib/firefox/firefox*/**browser_openjdk rx,

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1293439

Title:
  Apparmor prevents icedtea-7-plugin from creating necessary files

Status in “apparmor” package in Ubuntu:
  In Progress

Bug description:
  Apparmor prevents icedtea-7-plugin from creating
  /run/user/<UID>/icedteaplugin-<login>-<random>/, needed to work:

  Mar 17 10:48:52 ad2 kernel: [2831863.964092] type=1400
  audit(1395046132.183:851): apparmor="DENIED" operation="mkdir"
  parent=6425 profile="/usr/lib/firefox/firefox{,*[^s][^h]}"
  name="/run/user/1000/icedteaplugin-pseudo-7DURO0/" pid=30285 comm
  ="plugin-containe" requested_mask="c" denied_mask="c" fsuid=1000
  ouid=1000

  ~> lsb_release -rd
  Description:	Ubuntu 13.10
  Release:	13.10

  ~> apt-cache policy apparmor
  apparmor:
    Installed: 2.8.0-0ubuntu31.1
    Candidate: 2.8.0-0ubuntu31.1
    Version table:
   *** 2.8.0-0ubuntu31.1 0
          500 http://archive.ubuntu.com/ubuntu/ saucy-updates/main amd64 Packages
          100 /var/lib/dpkg/status
       2.8.0-0ubuntu31 0
          500 http://archive.ubuntu.com/ubuntu/ saucy/main amd64 Packages

  ProblemType: Bug
  DistroRelease: Ubuntu 13.10
  Package: apparmor 2.8.0-0ubuntu31.1
  ProcVersionSignature: Ubuntu 3.11.0-15.25-generic 3.11.10
  Uname: Linux 3.11.0-15-generic x86_64
  ApportVersion: 2.12.5-0ubuntu2.2
  Architecture: amd64
  Date: Mon Mar 17 10:59:53 2014
  MarkForUpload: True
  ProcKernelCmdline: BOOT_IMAGE=/boot/vmlinuz-3.11.0-15-generic root=UUID=16001ea5-4e94-44ae-9838-da89b0f3f88e ro
  SourcePackage: apparmor
  Syslog:
   
  UpgradeStatus: Upgraded to saucy on 2013-09-10 (187 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1293439/+subscriptions