touch-packages team mailing list archive

[Launchpad Bug Tracker <1339727@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package apparmor - 2.8.95~2430-0ubuntu5.2

---------------
apparmor (2.8.95~2430-0ubuntu5.2) trusty-proposed; urgency=medium

  * debian/patches/php5-Zend_semaphore-lp1401084.patch: allow php5
    abstraction access to Zend opcache files (LP: #1401084)
  * debian/patches/dnsmasq-lxc_networking-lp1403468.patch: update
    profile for lxc support (LP: #1403468)
  * debian/patches/profiles-texlive_font_generation-lp1010909.patch:
    allow generation of texlive fonts by sanitized-helpers
    (LP: #1010909)
  * debian/apport/source_apparmor.py: fix the apparmor apport hook
    so it does not raise an exception if a non-unicode character is
    found in /var/log/kern.log or in /var/log/syslog. This should
    work under python3 or python2.7 (LP: #1304447)
  * debian/patches/profiles-dovecot-updates-lp1296667.patch: update
    dovecot profiles to address several missing permissions.
    (LP: #1296667)
  * debian/patches/profiles-adjust_X_for_lightdm-lp1339727.patch:
    adjust X abstraction for LightDM xauthority location (LP: #1339727)
  * debian/patches/libapparmor-fix_memory_leaks-lp1340927.patch; fix
    memory leaks in log parsing component of libapparmor (LP: #1340927)
  * debian/patches/libapparmor-another_audit_format-lp1399027.patch:
    add support for another log format style (LP: #1399027)
  * debian/patches/tests-workaround_for_unix_socket_change-lp1425398.patch:
    work around apparmor kernel behavioral change in regression tests
    (LP: #1425398)
  * debian/control: add breaks on python3-apparmor against older
    apparmor-utils that used to be where python bits lived
    (LP: #1373259)
  * debian/patches/utils-update_to_2.9.2.patch: update the python
    utilities to the upstream 2.9.2 (LP: #1449769, incorporating a
    large number of fixes and improvements, including:
    - fix aa-genprof traceback with apparmor 2.8.95 (LP: #1294797)
    - fix aa-genprof crashing when selecting scan on Ubuntu 14.04 server
      (LP: #1319829)
    - make aa-logprof read profile instead of program binary
      (LP: #1317176, LP: #1324154)
    - aa-complain: don't traceback when marking multiple profiles
      (LP: #1378095)
    - make python tools able to parse mounts with UTF-8 non-ascii
      characters (LP: #1310598)

 -- Steve Beattie <sbeattie@xxxxxxxxxx>  Thu, 30 Apr 2015 12:18:08 -0700

** Changed in: apparmor (Ubuntu Trusty)
       Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1339727

Title:
  lightdm xauthority path is wrong

Status in apparmor package in Ubuntu:
  Fix Released
Status in apparmor source package in Trusty:
  Fix Released
Status in apparmor source package in Utopic:
  Fix Released

Bug description:
  [impact]

  This issue prevents X applications from working properly when lightdm is
  used as a display manager.

  [steps to reproduce]

  1) run evince in a desktop session started from lightdm. If this bug
  has not been addressed, apparmor denials will be seen on the
  /run/lightdm/$USER/xauthority file in /var/log/syslog.

  [regression potential]

  The change in the patch for this bug is a slight loosening of
  the apparmor policy for X applications. The risk of an introduced
  regression is small.

  [original description]

  The default apparmor 'X' abstraction permits access to
  /{,var/}run/lightdm/authority/[0-9]*, ostensibly for the xauthority
  file.  Except on Trusty, that's not where the xauthority file is.  It
  is instead in /run/lightdm/$USER, and named "xauthority".   I have had
  to udpated my apparmor configuration, lest apparmor convince Evince of
  being a filthy script kiddie, out to corrupt my xauth file.

  Please consider adding the following to the 'X' abstraction:

  owner /{,var/}run/lightdm/*/xauthority r,

  Relevant info:

  apparmor:
    Installed: 2.8.95~2430-0ubuntu5
    Candidate: 2.8.95~2430-0ubuntu5
    Version table:
   *** 2.8.95~2430-0ubuntu5 0
          500 http://mirrors.mit.edu/ubuntu/ trusty/main amd64 Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1339727/+subscriptions