touch-packages team mailing list archive

[Ugo Riboni <ugo.riboni@xxxxxxxxxxxxx>]

Adding the following two permissions to the apparmor profile solves the
problem:

  @{PROC}/[0-9]*/mounts r
  /dev/disks/by-label/ r

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1414625

Title:
  Temporarily grant additional rights to camera-app so it can read free
  disk space

Status in apparmor-easyprof-ubuntu package in Ubuntu:
  New

Bug description:
  To fix a critical bug for RTM we need camera app to be able to know how much free disk space is available. The bug is 
  https://bugs.launchpad.net/barajas/+bug/1405211

  To do this it uses a library (that will be part of QT 5.4 when it is
  released) that reads some system files in /proc and /dev that at the
  moment generate the following denials:

  [10846.769018] type=1400 audit(1422275993.028:285): apparmor="DENIED" operation="open" profile="com.ubuntu.camera_camera_3.0.0.493" name="/proc/22701/mounts" pid=22701 comm="camera-app" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
  [10846.769192] type=1400 audit(1422275993.028:286): apparmor="DENIED" operation="open" profile="com.ubuntu.camera_camera_3.0.0.493" name="/dev/disk/by-label/" pid=22701 comm="camera-app" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1414625/+subscriptions