Firefox apparmor profile does not allow access to transmission

Bug #476299 reported by Michael Jelnikar
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
firefox-3.5 (Ubuntu)
Fix Released
Low
Unassigned

Bug Description

Important line from kern.log:
audit(1257500470.144:24): operation="exec" pid=1895 parent=1894 profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="::x" denied_mask="::x" fsuid=1000 ouid=0 name="/usr/bin/transmission"

Binary package hint: firefox-3.5

I want take a bit torrent download directly from Firefox but I read a mistake message like: "/tmp/ubuntu-9.10-desktop-amd64.iso-1.torrent could not be opened, because an unknown error occurred.

Try saving to disc first and then opening the file."

ProblemType: Bug
Architecture: amd64
CheckboxSubmission: 7f3c4b6fea9dc899b06586f8e7d97b56
CheckboxSystem: 2954e74ba17fb0e37fc942cd1d9fab4e
Date: Fri Nov 6 10:41:25 2009
DistroRelease: Ubuntu 9.10
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
Package: firefox-3.5 3.5.4+nobinonly-0ubuntu0.9.10.1
ProcEnviron:
 LANGUAGE=en_GB.UTF-8
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SourcePackage: firefox-3.5
Uname: Linux 2.6.31-14-generic x86_64
XsessionErrors:
 (gnome-settings-daemon:1580): GLib-CRITICAL **: g_propagate_error: assertion `src != NULL' failed
 (polkit-gnome-authentication-agent-1:1694): GLib-CRITICAL **: g_once_init_leave: assertion `initialization_value != 0' failed
 (nautilus:1676): Eel-CRITICAL **: eel_preferences_get_boolean: assertion `preferences_is_initialized ()' failed
 (gnome-panel:1675): Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate widget with width -6 and height 24

Related branches

Revision history for this message
Michael Jelnikar (jelnikarmichael-deactivatedaccount-deactivatedaccount-deactivatedaccount) wrote :
Revision history for this message
Johannes Mockenhaupt (mockenh-deactivatedaccount) wrote :

Did you enable the apparmor profile for Firefox?

Revision history for this message
Michael Jelnikar (jelnikarmichael-deactivatedaccount-deactivatedaccount-deactivatedaccount) wrote : Re: [Bug 476299] Re: Torrent Download failed with an internal error

Hi, yes I did. I have disable the profile for Firefox and now the
download with Transmission is ok!

Am Samstag, den 07.11.2009, 23:15 +0000 schrieb Johannes Mockenhaupt:
> Did you enable the apparmor profile for Firefox?
>

Revision history for this message
Micah Gersten (micahg) wrote : Re: Torrent Download failed with an internal error

Thanks for taking the time to report this bug and helping to make Ubuntu better.
Could you please run the following command and attach /tmp/audit.log showing what was caught in the logs:
grep audit /var/log/kern.log > /tmp/audit.log

Changed in firefox-3.5 (Ubuntu):
status: New → Incomplete
Revision history for this message
Micah Gersten (micahg) wrote :

Please disregard the last comment as I see the log file was already attached.

description: updated
summary: - Torrent Download failed with an internal error
+ Firefox apparmor profile does not allow access to transmission
Revision history for this message
Micah Gersten (micahg) wrote :

Transmission is the default gnome torrent client, so this should probably be fixed.

Changed in firefox-3.5 (Ubuntu):
importance: Undecided → Low
status: Incomplete → Triaged
Revision history for this message
Micah Gersten (micahg) wrote :

Thanks for reporting this bug and any supporting documentation. Since this bug has enough information provided for a developer to begin work, I'm going to mark it as Triaged and let them handle it from here. Thanks for taking the time to make Ubuntu better! Please report any other issues you may find.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package firefox-3.5 - 3.5.6+nobinonly-0ubuntu1

---------------
firefox-3.5 (3.5.6+nobinonly-0ubuntu1) lucid; urgency=low

  * New upstream release v3.5.6 (FIREFOX_3_5_6_RELEASE)
    - see USN-874-1

  [ Micah Gersten <email address hidden> ]
  * Bump minimum system cairo to 1.8.8
    - update debian/rules
  * Fix .desktop Name field for Slovak translation (LP: 448683)
    - update debian/firefox-3.5-final.desktop
  * Fix .desktop Name field for Estonian and Arabic translations
    (LP: 419507, LP: 321239)
    - update debian/firefox-3.5-final.desktop

  [ Jamie Strandboge <email address hidden> ]
  * AppArmor fixes:
    - allow access to nautilus, to allow "Open containing folder" to work
      (LP: #452591)
    - allow access for deluge (LP: #455792)
    - work better with KDE by adding kde abstraction, allow access to soffice,
      allow access to okular and read access to /etc/fstab (for print dialog)
      (LP: #447006)
    - allow access to acroread (LP: #473268)
    - allow access to eog (LP: #464016)
    - allow access to transmission (LP: #476299)
    - deny noisy write attempts to deny /usr/lib/xulrunner-*/components/*.tmp
      as seen with 'firefox --help')
    - deny noisy read to /.suspended (when navigating directories)
    - allow access to /usr/bin/liferea-add-feed (LP: #488851)
    - allow access to azureus (LP: #482677)
    - don't require 'owner' for /media (LP: #479580)
    - adjust AppArmor profile binary globbing to match other branches
    - allow ixr access to sed (for first runs)

  [ Alexander Sack <email address hidden> ]
  * bump lower bound for system sqlite3 to >= 3.6.16.1
    - update debian/rules
 -- Alexander Sack <email address hidden> Wed, 16 Dec 2009 00:43:08 +0100

Changed in firefox-3.5 (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.