touch-packages team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

Marking the apparmor-easyprof-ubuntu task as invalid. We are going to
add workaround policy to the camera-app security json instead (I'll add
justification later).

** Also affects: camera-app
   Importance: Undecided
       Status: New

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
       Status: New => Won't Fix

** Changed in: camera-app
       Status: New => In Progress

** Changed in: camera-app
   Importance: Undecided => High

** Changed in: camera-app
     Assignee: (unassigned) => Ugo Riboni (uriboni)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1414625

Title:
  Temporarily grant additional rights to camera-app so it can read free
  disk space

Status in Camera App:
  In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
  Won't Fix

Bug description:
  To fix a critical bug for RTM we need camera app to be able to know how much free disk space is available. The bug is 
  https://bugs.launchpad.net/barajas/+bug/1405211

  To do this it uses a library (that will be part of QT 5.4 when it is
  released) that reads some system files in /proc and /dev that at the
  moment generate the following denials:

  [10846.769018] type=1400 audit(1422275993.028:285): apparmor="DENIED" operation="open" profile="com.ubuntu.camera_camera_3.0.0.493" name="/proc/22701/mounts" pid=22701 comm="camera-app" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
  [10846.769192] type=1400 audit(1422275993.028:286): apparmor="DENIED" operation="open" profile="com.ubuntu.camera_camera_3.0.0.493" name="/dev/disk/by-label/" pid=22701 comm="camera-app" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/camera-app/+bug/1414625/+subscriptions