[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Laércio de Sousa
OK, Robert! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules too tight for chromium Status in Light Display Manager: Fix Committed Status in Light Displ

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Robert Ancell
Laércio - can you open a new bug for this? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules too tight for chromium Status in Light Display Manager: Fix

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Laércio de Sousa
Could you please edit also the following directive in abstractions /lightdm_chromium-browser? I cannot close Chromium remotely with "killall chromium" from a guest session because it's currently disallowed to receive SIGTERM. signal (receive, send) set=("exists", "term") peer=/usr/lib/lightdm /lig

Re: [Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Chad Miller
Ah! I was worried it was some additional problem report after the package was modified through the security update above. Thank you. We think it should work for you after this update to lightdm is applied. -- You received this bug notification because you are a member of Desktop Packages, which

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Hadmut Danisch
> Can you elucidate what you intend us to know? Not really. You had asked me in comment #5 to paste in the output of this command, and I did as requested. I had no intention to transport a major message to the world, just to fulfill what I had been asked for. -- You received this bug notific

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Chad Miller
Hadmut, thank you, but I don't understand the significance of your comment. Can you elucidate what you intend us to know? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title:

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-15 Thread Hadmut Danisch
# dpkg -S $(grep -l -r chromium /etc/apparmor.d/) dpkg-query: no path found matching pattern /etc/apparmor.d/abstractions/ubuntu-browsers.d/chromium-browser evince-common: /etc/apparmor.d/abstractions/evince lightdm: /etc/apparmor.d/abstractions/lightdm apparmor: /etc/apparmor.d/abstractions/priva

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-13 Thread Launchpad Bug Tracker
This bug was fixed in the package lightdm - 1.16.4-0ubuntu1 --- lightdm (1.16.4-0ubuntu1) wily; urgency=medium * New upstream release: - Fix apparmor profiles for running Chromium in guest sessions (LP: #1504049) -- Robert Ancell Tue, 13 Oct 2015 11:47:16 +0100 ** Cha

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-13 Thread Robert Ancell
** Description changed: - Hi, + [Impact] + Unable to run Chromium from guest session. - when running chromium, I get lots of apparmor alerts and warnings, - although actions seem to be legitimate and normal. Looks as if the - apparmor ruleset is too tight. + [Test Case] + 1. Start Ubuntu + 2. F

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-13 Thread Launchpad Bug Tracker
** Branch linked: lp:lightdm/1.16 ** Branch linked: lp:lightdm/1.14 ** Branch linked: lp:lightdm/1.10 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules to

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-13 Thread Robert Ancell
** Changed in: lightdm/1.10 Importance: Undecided => Medium ** Changed in: lightdm/1.10 Status: New => Fix Committed ** Changed in: lightdm/1.10 Milestone: None => 1.10.6 ** Changed in: lightdm/1.14 Importance: Undecided => Medium ** Changed in: lightdm/1.14 Status: New

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Robert Ancell
** Changed in: lightdm Importance: Undecided => Medium ** Changed in: lightdm Status: New => Fix Committed ** Changed in: lightdm Milestone: None => 1.17.0 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu.

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Chad Miller
** Branch linked: lp:~cmiller/lightdm/guest-session-chromium-sandbox- cgroups -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules too tight for chromium Stat

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Chad Miller
** Branch linked: lp:~cmiller/apparmor/guest-session-chromium-sandbox- cgroups -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules too tight for chromium Sta

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Robert Ancell
** Also affects: lightdm Importance: Undecided Status: New ** Also affects: lightdm/1.10 Importance: Undecided Status: New ** Also affects: lightdm/trunk Importance: Undecided Status: New ** Also affects: lightdm/1.16 Importance: Undecided Status: New **

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Robert Ancell
** Also affects: chromium-browser (Ubuntu Wily) Importance: Undecided Status: Confirmed ** Also affects: lightdm (Ubuntu Wily) Importance: Undecided Assignee: Robert Ancell (robert-ancell) Status: New ** Also affects: chromium-browser (Ubuntu Vivid) Importance: Undecid

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Chad Miller
** Attachment added: "debdiff punching holes for cr sandbox to lightdm guest session" https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1504049/+attachment/4492589/+files/lightdm-debdiff ** Also affects: lightdm (Ubuntu) Importance: Undecided Status: New ** Changed in

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-12 Thread Chad Miller
** Changed in: chromium-browser (Ubuntu) Status: Incomplete => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules too tight for chr

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-08 Thread Chad Miller
apparmor="ALLOWED" operation="capable" profile="/usr/lib/chromium-browser/chromium-browser" comm="chromium-browse" capability=21 capname="sys_admin" apparmor="ALLOWED" operation="open" profile="/usr/lib/chromium-browser/chromium-browser" name="/proc/32564/setgroups" comm="chromium-browse" requ

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-08 Thread Chad Miller
Please paste the output of $ dpkg -S $(grep -l -r chromium /etc/apparmor.d/) ** Changed in: chromium-browser (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. http

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-08 Thread Hadmut Danisch
** Attachment added: "kern.log" https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1504049/+attachment/4488343/+files/kern.log -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launc

[Desktop-packages] [Bug 1504049] Re: apparmor rules too tight for chromium

2015-10-08 Thread Hadmut Danisch
BTW: the logs say "ALLOWED", but still are annoying. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1504049 Title: apparmor rules too tight for chromium Status in chromium-b