[Bug 1575438] Re: usr.sbin.nscd needs r/w access to nslcd socket

2018-08-03 Thread Daniel Richard G.
An update to the "ldapclient" abstraction has been merged upstream: https://gitlab.com/apparmor/apparmor/merge_requests/153/diffs?commit_id=ac1d0545f458b11728f2bcb4a7de0567538fa94a ** Changed in: apparmor Status: New => Fix Committed ** Changed in: apparmor (Ubuntu) Status: New =>

[Bug 1777070] Re: firefox plugin libwidevinecdm.so crashes due to apparmor denial

2018-08-03 Thread Daniel Richard G.
I think we're going to need more information on how this plugin got in there in the first place. Being able to map a library in a user-writable directory doesn't sound terribly safe... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. ht

[Bug 1690858] Re: AppArmor profile blocks access to .config/gtk-3.0/settings.ini

2018-08-03 Thread Daniel Richard G.
I see that /etc/apparmor.d/abstractions/gnome in Ubuntu 18.04/bionic has this line... owner @{HOME}/.config/gtk-3.0/* r, ...which covers the settings.ini file. So this should no longer be an issue. ** Changed in: firefox (Ubuntu) Status: New => Fix Released -- You received thi

[Bug 557818] Re: cups-client does not create /etc/cups directory, let alone client.conf

2018-08-05 Thread Daniel Richard G.
Bug persists in Ubuntu 18.04/bionic: # ls /etc/cups ls: cannot access '/etc/cups': No such file or directory # apt-get install cups-client Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: cups-co

[Bug 1785548] [NEW] GRUB countdown does not begin until key press

2018-08-05 Thread Daniel Richard G.
Public bug reported: This concerns grub-pc 2.02-2ubuntu8.2 in Ubuntu 18.04/bionic. I have GRUB configured to do a five-second countdown (no menu) on boot: GRUB_TIMEOUT_STYLE=countdown GRUB_TIMEOUT=5 Strangely enough, on a "Dell Precision Workstation" PC that I have here, the "5" appears

[Bug 1777070] Re: firefox plugin libwidevinecdm.so crashes due to apparmor denial

2018-08-09 Thread Daniel Richard G.
Arrgh... this is not a great way of working (malware could write to that location and then load in code), but as it is what we've got, I've added the rule to a forthcoming Firefox profile update. Incidentally, Olivier, if you've got a line on who's responsible for the Firefox profile there, it wou

[Bug 1782641] [NEW] Request: Rename "ubuntu-keyring" package to "ubuntu-archive-keyring" for consistency with Debian

2018-07-19 Thread Daniel Richard G.
Public bug reported: The package that Ubuntu calls "ubuntu-keyring" is present in Debian as "ubuntu-archive-keyring". Debian has separate "debian-keyring" and "debian-archive-keyring" packages, described as follows: d-k: GnuPG keys of Debian Developers and Maintainers d-a-k: GnuPG archiv

[Bug 1782275] Re: Conflict between resolvconf and systemd-resolved dhclient scripts

2018-07-20 Thread Daniel Richard G.
This issue can be addressed with a manual action, but first you have to dig into the scripts to diagnose the problem, and really if resolvconf is installed then it should just work. Part of this setup involves disabling systemd-resolved, in favor of a "direct" /etc/resolv.conf, to match the networ

[Bug 1782641] Re: Request: Rename "ubuntu-keyring" package to "ubuntu-archive-keyring" for consistency with Debian

2018-07-20 Thread Daniel Richard G.
Dimitri, thank you for laying out the rationale behind the package name. Since there is good reason for things to be the way they are here, I've opened a bug on the Debian side for them to address the naming inconsistency: https://bugs.debian.org/904152 ** Bug watch added: Debian Bug tracker

[Bug 1782843] [NEW] Error spam when pulseaudio is not active

2018-07-20 Thread Daniel Richard G.
Public bug reported: This concerns xfce4-pulseaudio-plugin 0.4.1-0ubuntu1 in Ubuntu 18.04/bionic. In an Xfce desktop session, when this package is installed, and Pulseaudio is not active, I see a steady procession of these messages in ~/.xsession-errors: (wrapper-2.0:2036): pulseaudio-p

[Bug 425979] Re: [UEFI boot only] Holding shift fails to display grub2 menu

2018-07-22 Thread Daniel Richard G.
Hello everyone, There is a bug report similar to this one on the Debian side: https://bugs.debian.org/902928 There, Colin Watson made an interesting comment: > When I last looked into this, this wasn't possible with UEFI: the > firmware doesn't tell us about held modifier keys. You'll prob

[Bug 1783044] [NEW] grub-efi-amd64 postinst fails to install GRUB if /boot/efi/EFI/ubuntu/ is not present

2018-07-22 Thread Daniel Richard G.
Public bug reported: This concerns grub-efi-amd64 2.02-2ubuntu8.1 in Ubuntu 18.04/bionic. When the grub-efi-amd64 package is initially installed on a system that has not previously booted via the Ubuntu EFI bootloader (so /boot/efi/ is either empty, or at least does not have a /boot/efi/EFI/ubunt

[Bug 1783044] Re: grub-efi-amd64 postinst fails to install GRUB if /boot/efi/EFI/ubuntu/ is not present

2018-07-22 Thread Daniel Richard G.
I should point out that on the Debian side, the same conditional exists in the postinst script, so this same issue occurs there as well. (Only with the /boot/efi/EFI/debian/ directory, of course.) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed t

[Bug 1783057] [NEW] Allow support of Secure Boot without touching NVRAM

2018-07-22 Thread Daniel Richard G.
Public bug reported: This concerns shim 13-0ubuntu2 in Ubuntu 18.04/bionic. (Note: I am not entirely clear on whether this issue belongs to shim, or to grub2; please redirect as appropriate.) I am installing Ubuntu with EFI support with the following two prerequisites: 1. No changes are made

[Bug 911540] Re: about:memory displays a weird error due to lacking access to /proc/self/smaps

2018-07-29 Thread Daniel Richard G.
For the record, Firefox 61 very much does continue to make use of /proc//smaps (and /proc//statm) when using the about:memory page. I confirmed this by experimentally commenting out the AppArmor rules for those two /proc files (motivated by comment #3 above), and subsequently observed AppA

[Bug 1662501] Re: since the apparmor profile is disabled by default, please make the apparmor policy strict with option to make less strict

2018-07-29 Thread Daniel Richard G.
I think we could really use some kind of conditional construct (IF ... THEN ...) in AppArmor syntax. Everything being talking about here should, ideally, be adjustable using tunables. With a debconf configuration option, even. Between users who want strict access control to user files, and users w

[Bug 885211] Re: firefox generates apparmor violations

2018-07-29 Thread Daniel Richard G.
Does this issue still occur with Firefox 60 or later? I am unable to reproduce it on 18.04/bionic. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/885211 Title: firefox generates apparmor violations

[Bug 1372113] Re: flashplayer does not work due missing apparmor rule

2018-07-29 Thread Daniel Richard G.
The current Firefox AppArmor profile includes the "openssl" abstraction, which allows access to /etc/ssl/openssl.cnf. This bug should no longer be present in Ubuntu. ** Changed in: firefox (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a m

[Bug 1553712] Re: usr.bin.firefox apparmor profile blocks access to mounttracker

2018-07-29 Thread Daniel Richard G.
Has anyone observed any undesirable behavior from Firefox when access to these mount-related DBus services is denied? It's not clear to me why Firefox is even calling these in the first place, and given that mounts can include NFS servers and the like, I'd just as soon deny this access if there's

[Bug 1553708] Re: usr.bin.firefox profile blocks access to the AMD GPU

2018-07-29 Thread Daniel Richard G.
Hello Jean-Philippe, do you still see this issue if those AppArmor permissions are commented out? Are you using the fglrx driver? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1553708 Title: usr.bi

[Bug 1660086] Re: Apparmor blocks firefox 51.0.1 reading /usr/share/distro-info/debian.csv

2018-07-29 Thread Daniel Richard G.
The Firefox AppArmor profile shipped in Ubuntu 18.04/bionic includes a rule for /usr/share/distro-info/*.csv, so this should no longer be an issue. ** Changed in: firefox (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, wh

[Bug 1553758] Re: usr.bin.firefox apparmor profile blocks access to meminfo

2018-07-29 Thread Daniel Richard G.
The Firefox AppArmor profile shipped in Ubuntu 18.04/bionic includes this rule, so this should no longer be an issue. ** Changed in: firefox (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubu

[Bug 1784499] Re: AppArmor treats regular NFS file access as network op

2018-07-30 Thread Daniel Richard G.
I have an additional test case that is perhaps more immediate. Attempting to view a roff file in NFS directly: $ man ./zlib.3 man: ./zlib.3: Permission denied No manual entry for ./zlib.3 This fails despite the permissive "/** mrixwlk" rule in the AppArmor profile. Similar output in t

[Bug 1784499] [NEW] AppArmor treats regular NFS file access as network op

2018-07-30 Thread Daniel Richard G.
Public bug reported: I am using AppArmor 2.12-4ubuntu5 on Ubuntu 18.04/bionic. I have the usr.bin.man profile enforced, and home directories in NFS. The log excerpt copied below is the result of a single invocation of "man ls" by an unprivileged user. (The program did display the man page correc

[Bug 1665535] Re: WebRTC webcam support broken in firefox due to apparmor

2018-07-30 Thread Daniel Richard G.
/etc/apparmor.d/abstractions/ubuntu-browsers.d/multimedia in Ubuntu 18.04/bionic contains the fix. Marking the Firefox bug as Invalid, since the issue was fixed by updating the AppArmor abstraction. (I.e. no change to the firefox package was/is needed.) ** Changed in: firefox (Ubuntu) Stat

[Bug 1660298] Re: Firefox misses interface org.gtk.vfs.Enumerator

2018-07-30 Thread Daniel Richard G.
Does this issue still arise with Firefox 60+? I've encountered various DBus VFS-related denials with Firefox under AppArmor, but not this particular one. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1

[Bug 1662501] Re: since the apparmor profile is disabled by default, please make the apparmor policy strict with option to make less strict

2018-07-30 Thread Daniel Richard G.
Hmmm, interesting! I wouldn't hold out too long on giving the friendly tools smarts vis-a-vis conditionals, since that kind of logic isn't necessarily straightforward (i.e. can be hard/time-consuming to implement), it's not necessary for power/paranoid users (we're happy resorting to a text editor

[Bug 1782274] [NEW] resolvconf package needs dependency on ifupdown

2018-07-17 Thread Daniel Richard G.
Public bug reported: When I install resolvconf on a minimal install of Ubuntu 18.04 (bionic), I see this: # apt-get install resolvconf Reading package lists... Done Building dependency tree Reading state information... Done The following NEW packages will be installed: resolvconf 0 upgra

[Bug 1782275] [NEW] Conflict between resolvconf and systemd-resolved dhclient scripts

2018-07-17 Thread Daniel Richard G.
Public bug reported: I am setting up an Ubuntu 18.04 (bionic) system with ifupdown instead of netplan, as the latter does not meet my needs. I am using resolvconf to update /etc/resolv.conf from DHCP, as in earlier releases. Unfortunately, I am not seeing /etc/resolv.conf (actually a symlink to /

[Bug 1575408] Re: pkgAcquire::Run warnings ("Can't drop privileges for downloading...") during font-file downloads

2016-11-26 Thread Daniel Richard G.
Update: This bug is NOT a duplicate of https://bugs.launchpad.net/bugs/1607535 (Bug #1607535 is about unreliable SourceForge servers; this is about warnings from the package scripts) ** This bug is no longer a duplicate of bug 1607535 ttf-mscorefonts-installer 3.4+nmu1ubuntu2 fails to install

[Bug 1522675] Re: Warning messages about unsandboxed downloads

2017-05-17 Thread Daniel Richard G.
Hi Luigi, This StackExchange posting should answer your question: https://unix.stackexchange.com/questions/3586/what-do-the-numbers-in-a -man-page-mean -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1

[Bug 1722027] [NEW] Removing kernel packages leads to initrd regens, reboot-required

2017-10-07 Thread Daniel Richard G.
Public bug reported: This concerns linux-base 4.0ubuntu1 in Ubuntu Xenial. Removing Linux kernel packages from the system leads to initrd generation and causes /var/run/reboot-required to appear. Neither of these side effects should occur if only kernel packages older than the running one are rem

[Bug 1252904] Re: Move chromium-browser apparmor profile from apparmor package to c-b

2014-05-29 Thread Daniel Richard G.
It's not clear that the chromium-browser package maintainers are willing/interested in taking on the profile. As it is, this has been almost entirely Jamie Strandboge's show, and he's a security guy, not a Chromium dev. That said, i do wonder why the profile doesn't exist in Ubuntu's apparmor Baza

[Bug 513644] Re: Does not log fsck invocations in /var/log/fsck/

2014-05-15 Thread Daniel Richard G.
Marcelo: You could make /sbin/fsck a shell script that wraps the real fsck binary, and logs the output as desired. Doing this with a dpkg diversion might even keep things from breaking when the util-linux package is upgraded -- You received this bug notification because you are a member of Ub

[Bug 550101] Re: Export of keys and keyrings is not available

2014-05-17 Thread Daniel Richard G.
Jorge: Check in the upstream bugzilla to see if someone's already filed a bug, but if not, then go for it. Very few Ubuntu package maintainers take the initiative to file upstream bugs themselves. If you do file a bug upstream, or a report already exists, please link it here! (As a possible worka

[Bug 1700468] Re: "krb5-auth-dialog --auto" segfaults on startup

2017-07-06 Thread Daniel Richard G.
Er... $ klist -v klist: invalid option -- 'v' Usage: klist [-e] [-V] [[-c] [-l] [-A] [-d] [-f] [-s] [-a [-n]]] [-k [-t] [-K]] [name] [...] Remember, the segfault occurs with a user that is local-only. Kerberos infrastructure is installed on the system, but the user has no Kerbero

[Bug 1700468] Re: "krb5-auth-dialog --auto" segfaults on startup

2017-07-07 Thread Daniel Richard G.
Confirmed that this fixes the segfault for me when applied to version 3.20.0. Thanks :) (Figured this would be easy to reproduce...) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1700468 Title: "kr

[Bug 1580445] [NEW] Minimal-install boot "animation" can lead to brown-colored login prompt

2016-05-10 Thread Daniel Richard G.
Public bug reported: I am seeing this on a Xenial minimal install with plymouth 0.9.2-3ubuntu13 (as well as 0.9.2-3ubuntu13.1). After the text-mode boot logo ("Ubuntu 16.04" with the four dots) is shown on start-up, the text-mode tty1 login prompt is sometimes printed in brown/orange text instead

[Bug 1578006] Re: Xenial minimal install: "W: plymouth: The plugin label.so is missing, the selected theme might not work as expected."

2016-05-10 Thread Daniel Richard G.
On a minimal install: # update-initramfs -u update-initramfs: Generating /boot/initrd.img-4.4.0-22-generic W: plymouth: The plugin label.so is missing, the selected theme might not work as expected. W: plymouth: You might want to install the plymouth-themes and plymouth-label package to fix this

[Bug 1599646] [NEW] E-mail report contains repeated "Reading database ... NN%" lines

2016-07-06 Thread Daniel Richard G.
Public bug reported: This concerns unattended-upgrades 0.90 in Xenial. Here is an excerpt from an e-mail report sent out by u-u after the upgrade process is completed: Package installation log: Log started: 2016-07-06 17:24:21 Preconfiguring packages ... (Reading

[Bug 381517] Re: Settings in /etc/kbd/config are not read

2016-05-20 Thread Daniel Richard G.
Thanks to systemd, I've had to update my setterm invocation in /etc/rc.local to the following: setterm --term linux --blank 0 --powerdown 0 >/dev/console ("--powersave off" fails with an "Inappropriate ioctl" error because rc.local no longer runs directly on the Linux virtual console.) -- Y

[Bug 1258245] Re: syslog user can't write to serial or terminal devices

2016-05-22 Thread Daniel Richard G.
Generalized the title to include terminal devices (e.g. Linux virtual terminals) as well. I'd like to see a better way to set this up. Yes, you can add the syslog user to the dialout and/or tty groups, but that grants access to *all* serial/terminal devices respectively. This can have security con

[Bug 1584575] [NEW] /lib/systemd/system/lightdm.service file has no [Install] clause

2016-05-22 Thread Daniel Richard G.
Public bug reported: This concerns lightdm 1.18.1-0ubuntu1 in Xenial. The /lib/systemd/system/lightdm.service file lacks an [Install] clause. Meaning, that if you do # systemctl disable display-manager to prevent LightDM from starting, running # systemctl enable lightdm does not resto

[Bug 1584575] Re: /lib/systemd/system/lightdm.service file has no [Install] clause

2016-05-22 Thread Daniel Richard G.
This whole systemd thing is new to me, and I can't say I'm terribly enamored of it, so I'm not the best person to ask. But by way of example, I'll point out what a couple other .service files do: /lib/systemd/system/rsyslog.service: [Install] WantedBy=multi-user.target Alias=syslog.s

[Bug 1577562] [NEW] upstart/sessions/gpg-agent.conf starts gpg-agent unconditionally

2016-05-02 Thread Daniel Richard G.
Public bug reported: I have a Xenial system; gnupg-agent 2.1.11-6ubuntu2 is part of the install. In /etc/X11/Xsession.d/90gpg-agent , gpg-agent is started if either ~/.gnupg/gpg.conf or ~/.gnupg/options contains a "use-agent" directive. This part is working fine, as far as I'm aware. Now, the /u

[Bug 1512002] Re: Annoying dialog "Authentication is required to change your own user data"

2016-05-02 Thread Daniel Richard G.
Spurious dialog observed in remote X session on Xenial install with accountservice 0.6.40-2ubuntu10. Enabled xenial-proposed, installed accountservice 0.6.40-2ubuntu11, and the dialog no longer appears. I wasn't seeing this problem as badly as some other folks here, but for my use case, the propo

[Bug 1577920] [NEW] dbus-launch et al. still running after XFCE session exits

2016-05-03 Thread Daniel Richard G.
Public bug reported: I am using xfce4-session 4.12.1-3ubuntu1 on Xenial. I am logging into a remote system via SSH with X11 forwarding, starting the XFCE desktop with "startxfce4", and then exiting the session. After logout, several processes remain visible, most notably dbus-launch (which appe

[Bug 1274643] Re: gpg-agent still running after session logout

2016-05-03 Thread Daniel Richard G.
Hello, I, too, am seeing this issue of gpg-agent persisting after an XFCE session ends. However, I think the problem may be outside of xfce4-session proper. In my investigation into https://bugs.launchpad.net/bugs/1577562 , I found two places where gpg-agent may be started at the beginning of an

[Bug 1131442] Re: gvfsd-trash process survives logout

2016-05-03 Thread Daniel Richard G.
This issue is no longer observable in a standard console X11 login on Xenial. There is still an issue with GVFS daemons hanging around after an XFCE session that was launched from a terminal (as in a remote X11 session), but that is actually due to dbus-launch not being killed at the end of the se

[Bug 1578006] [NEW] Xenial minimal install: "W: plymouth: The plugin label.so is missing, the selected theme might not work as expected."

2016-05-03 Thread Daniel Richard G.
Public bug reported: I installed a minimal Xenial system. Whenever the initramfs is regenerated, I see W: plymouth: The plugin label.so is missing, the selected theme might not work as expected. W: plymouth: You might want to install the plymouth-themes and plymouth-label package to fix

[Bug 1575455] Re: New AppArmor profile: usr.sbin.nslcd

2016-05-04 Thread Daniel Richard G.
Seth, it seems you're absolutely right. Denying dgram while the system is up is no big deal, because DNS lookups go through nscd (or other similar infrastructure) instead of being sent out directly. But when the system is starting up, and nscd et al. aren't running yet, the queries do need to go

[Bug 1575455] Re: New AppArmor profile: usr.sbin.nslcd

2016-05-04 Thread Daniel Richard G.
Thank you Seth :-) Next rev in each release should have this, right? No copyright line is needed; this was trivial to derive from the nscd profile. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/15754

[Bug 1575392] [NEW] Use force-complain symlinks instead of hard-coded "complain" flags

2016-04-26 Thread Daniel Richard G.
Public bug reported: I am using apparmor-profiles in Xenial. The AppArmor profiles, by default, are set to "complain" mode by way of "flag=(complain)" directives written into the profiles themselves. If I want these profiles to be enforced, then I have to edit each one and manually delete the di

[Bug 1575408] [NEW] pkgAcquire::Run warnings ("Can't drop privileges for downloading...") during font-file downloads

2016-04-26 Thread Daniel Richard G.
Public bug reported: Installing ttf-mscorefonts-installer 3.4+nmu1ubuntu2 on Xenial, I see the following in the output of apt-get(8): [...] ttf-mscorefonts-installer: downloading http://downloads.sourceforge.net/corefonts/andale32.exe Get:1 http://downloads.sourceforge.net/corefonts/andale32.exe

[Bug 369575] Re: Why is /usr/share/pam-configs/krb5 specifying minimum_uid= ?

2016-04-26 Thread Daniel Richard G.
I've been working on a Kerberos system config lately, and have once more run into the title question. It's been six years. Debian bugs #330882 (no real shells for system users) and #429692 (support include directives in krb5.conf) are done and laid to rest. Can we move minimum_uid= out from the "

[Bug 1575438] [NEW] usr.sbin.nscd needs r/w access to nslcd socket

2016-04-26 Thread Daniel Richard G.
Public bug reported: I am usinc nscd with nslcd (LDAP lookup daemon) for NSS services via LDAP. It is typical to configure nslcd to connect to the actual LDAP server, and then set up /etc/ldap.conf (which is what NSS/nscd uses for "ldap" type lookups in /etc/nsswitch.conf) with a server URI of ld

[Bug 1575455] [NEW] New AppArmor profile: usr.sbin.nslcd

2016-04-26 Thread Daniel Richard G.
Public bug reported: nslcd is a good program to be covered by an AppArmor profile, as it communicates with an LDAP server and services queries from arbitrary local applications. This new profile used the existing usr.sbin.nscd profile as a starting point. ** Affects: apparmor (Ubuntu) Impor

[Bug 369575] Re: Why is /usr/share/pam-configs/krb5 specifying minimum_uid= ?

2016-04-26 Thread Daniel Richard G.
> I don't think Heimdal supports including krb5.conf snippets, which means we can't use the include functionality in kerberos-configs. And even if it did, it would still be awkward (you have to add the #include at any rate). It needs to be a standard expectation these days that configs in /etc sup

[Bug 1471645] Re: [trusty] [regression] chromium-browser crashed with SIGABRT in base::debug::BreakDebugger()

2016-04-26 Thread Daniel Richard G.
Chromium continues to fail on Xenial with the title error message when the currently-shipped AppArmor profile is enforced. I've updated my profile adjustments to address some new issues that have cropped up in recent builds of Chromium. Everyone who wants to get things working again, please add t

[Bug 1575455] Re: New AppArmor profile: usr.sbin.nslcd

2016-04-26 Thread Daniel Richard G.
For my part, I'm not seeing DNS issues, and I've got a hostname in my LDAP server URI. I'm not sure what goes on under the hood for normal DNS resolution these days (maybe DNS over TCP is favored now?), but if there's any doubt in your mind, feel free to drop those lines. -- You received this bu

[Bug 1575438] Re: usr.sbin.nscd needs r/w access to nslcd socket

2016-04-26 Thread Daniel Richard G.
Minor addendum: It's conceivable that the new line should go into rather than just the nscd profile. I do see that the nscd socket is already mentioned there. I don't know if/why anything else would need access to the nslcd socket, but that may be a valid use case for other folks. -- You receiv

[Bug 334374] Re: libnss-ldap should not depend on libpam-ldap

2016-04-27 Thread Daniel Richard G.
Hi everyone. I've been setting up LDAP in Ubuntu lately, and have run headlong into this issue again. Arguably, the situation has gotten worse in the past three years, as the dependency rat's nest has become more convoluted. I've put together a new visual aid to illustrate the current situation;

[Bug 334374] Re: libnss-ldap should not depend on libpam-ldap

2016-04-27 Thread Daniel Richard G.
Also, for those interested, here is the GraphViz source for the "visual aid." The graphic can be regenerated with the command $ dot -Tpng ldap-deps.dot >ldap-deps.png (The dot(1) command is in the "graphviz" package.) ** Attachment added: "ldap-deps.dot" https://bugs.launchpad.net/ubuntu

[Bug 1576903] [NEW] Does not recognize Windows UNC paths

2016-04-29 Thread Daniel Richard G.
Public bug reported: I am using thunar version 1.6.10-2ubuntu1 in Xenial. Thunar connects to SMB/CIFS shares just fine, even using current Kerberos credentials to avoid any password prompt. That part's working great. However, if I enter a UNC path into the location bar like "\\server\share\path\

[Bug 1584575] Re: /lib/systemd/system/lightdm.service file has no [Install] clause

2016-07-28 Thread Daniel Richard G.
Maybe make display-manager.service into an actual service file (rather than a symlink), and have that start whatever /etc/X11/default-display- manager points to? What I want is to be able to disable and then re-enable the display manager starting on boot using similar administrative commands, like

[Bug 1636701] Re: Removing kernel package triggers DKMS build

2016-10-25 Thread Daniel Richard G.
I should point out, the update-initramfs invocations should also not be happening for kernel packages being removed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1636701 Title: Removing kernel pack

[Bug 1636701] [NEW] Removing kernel package triggers DKMS build

2016-10-25 Thread Daniel Richard G.
Public bug reported: I'm filing this against dkms 2.2.0.3-2ubuntu11.2 in Ubuntu Xenial, although the issue may come down to a different package. I issued an "apt-get --purge autoremove" command to clear out some old kernel packages, and the command took several minutes to complete due to kernel m

[Bug 1575408] Re: pkgAcquire::Run warnings ("Can't drop privileges for downloading...") during font-file downloads

2016-12-01 Thread Daniel Richard G.
Hi Alex, the failure to download is actually bug #1607535. This bug is about the "Can't drop privileges" warnings, which are ultimately harmless to package installation. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.laun

[Bug 1575408] Re: pkgAcquire::Run warnings ("Can't drop privileges for downloading...") during font-file downloads

2016-12-01 Thread Daniel Richard G.
*** This bug is a duplicate of bug 1522675 *** https://bugs.launchpad.net/bugs/1522675 This appears to be a duplicate of bug #1522675, which more broadly addresses the "_apt" user permissions issue. ** This bug has been marked a duplicate of bug 1522675 Can't drop privileges for downloadin

[Bug 1522675] Re: Can't drop privileges for downloading : _apt user not allowed

2016-12-01 Thread Daniel Richard G.
Benjamin, what you're seeing appears to be bug #1607535. (That bug report doesn't quote the "/the fonts/" URL directly, but it links to a comment that does. I have a bug report (bug #1575408) against ttf-mscorefonts-installer due to the "Can't drop privileges" warning, but am assuming that that wa

[Bug 988992] Re: chromium-browser crashed with SIGSEGV

2012-04-26 Thread Daniel Richard G.
** Description changed: I started a separate instance of Chromium in Incognito mode, and it crashed an instant after the window came up. ProblemType: Crash DistroRelease: Ubuntu 11.10 Package: chromium-browser 18.0.1025.151~r130497-0ubuntu0.11.10.1 ProcVersionSignature: Ubuntu 3.0.0

[Bug 932988] [NEW] Cannot pass additional command-line options to X server

2012-02-15 Thread Daniel Richard G.
Public bug reported: I am using LightDM 1.0.6-0ubuntu1.2 on Oneiric. I would like to pass the "-logdir /path/to/file" option to the X server. In the old days, I would edit a file like /etc/X11/Xserver and add the option in there. LightDM, however, constructs the X server invocation in C code, spe

[Bug 710733] Re: LKCD Not Executing kexec Properly

2012-02-16 Thread Daniel Richard G.
Technically, the 64MB-too-small bug is #785394, but whatever it takes to get this done! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/710733 Title: LKCD Not Executing kexec Properly To manage notif

[Bug 934812] [NEW] 8139too: NIC stops working with "NETDEV WATCHDOG: eth0 (8139too): transmit queue 0 timed out"

2012-02-18 Thread Daniel Richard G.
Public bug reported: I have a Toshiba laptop (Satellite A65) with a built-in Ethernet adapter, running Ubuntu Oneiric with the stock kernel 3.0.0-16.28. After some time in operation, while the system is in use, the network connection stops working and I find the following in /var/log/syslog: Feb

[Bug 934812] Re: 8139too: NIC stops working with "NETDEV WATCHDOG: eth0 (8139too): transmit queue 0 timed out"

2012-02-18 Thread Daniel Richard G.
** Attachment added: "Output of "lspci -vvnn"" https://bugs.launchpad.net/bugs/934812/+attachment/2751955/+files/lspci-vvnn.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/934812 Title: 8139to

[Bug 934812] Re: 8139too: NIC stops working with "NETDEV WATCHDOG: eth0 (8139too): transmit queue 0 timed out"

2012-02-18 Thread Daniel Richard G.
This is a minimal install running off a CompactFlash card, so I actually don't have the apport-collect command. I can provide any telemetry that is needed manually, however. (Note that I've encountered this same error previously with a stock install, so the bug is clearly independent of the minima

[Bug 691803] Re: parole-media-plugin crashed with SIGSEGV in __pthread_mutex_lock()

2010-12-17 Thread Daniel Richard G.
** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/691803 Title: parole-media-plugin crashed with SIGSEGV in __pthread_mutex_lock() -- ubuntu-bugs mailing list ubuntu-

[Bug 700895] [NEW] Hangs on startup, even with uninitialized Wine-prefix

2011-01-09 Thread Daniel Richard G.
Public bug reported: Binary package hint: wine1.2 This concerns wine1.2 1.2.1-0ubuntu1 in Ubuntu Maverick. I went to start up an application in Wine, one that I had used many times in previous Ubuntu releases. Instead of taking a few seconds to start up as usual, Wine hung, not even mapping a wi

[Bug 700895] Re: Hangs on startup, even with uninitialized Wine-prefix

2011-01-09 Thread Daniel Richard G.
** Attachment added: "wine-output.txt" https://bugs.launchpad.net/bugs/700895/+attachment/1789723/+files/wine-output.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/700895 Title: Hangs on sta

[Bug 700912] Re: dosbox crashed with SIGSEGV

2011-01-09 Thread Daniel Richard G.
** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/700912 Title: dosbox crashed with SIGSEGV -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubun

[Bug 585061]

2011-01-10 Thread Daniel Richard G.
Can the patch be pushed to 3.6.x? (Just noticed it's not in 3.6.13.) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/585061 Title: Segfaults in nsUrlClassifierDBService.cpp when homedir is inaccessibl

[Bug 557266] Re: [needs linux-2.6.36.2] [Radeon kernel module] drmRadeonCmdBuffer: -22. Kernel failed to parse or rejected command stream

2011-01-10 Thread Daniel Richard G.
@Risto, I think you're seeing the same bug as Alexei in comment #44. Have a look at https://bugs.freedesktop.org/show_bug.cgi?id=31152 Please give the packages in the xorg-edgers/radeon PPA a try, as those should have the fix: https://launchpad.net/~xorg-edgers/+archive/radeon -- You r

[Bug 700912] Re: dosbox crashed with SIGSEGV

2011-01-10 Thread Daniel Richard G.
I've dug a bit into the issue, and put together a patch for the upstream: https://sourceforge.net/tracker/?func=detail&aid=3154782&group_id=52551&atid=467234 ** Bug watch added: SourceForge.net Tracker #3154782 http://sourceforge.net/support/tracker.php?aid=3154782 ** Changed in: dosbox (Ubun

[Bug 585061]

2011-01-12 Thread Daniel Richard G.
Al: I'm presuming the ideal is to reproduce a crash with 3.6.13, and observe the lack of one with 3.6.14pre. However, whichever of the two I install, the auto-update installs the new 3.6.14pre nightly---which may be affecting the behavior of the bug. How should I go about testing this? -- You rec

[Bug 683753] Re: xfce4-panel crashed with signal 7 in FcFontMatch()

2010-12-01 Thread Daniel Richard G.
** Visibility changed to: Public -- xfce4-panel crashed with signal 7 in FcFontMatch() https://bugs.launchpad.net/bugs/683753 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com http

[Bug 8980] Re: hostname -f does not return a proper FQDN

2010-12-01 Thread Daniel Richard G.
Here is my view of the problem: On an up-to-date Maverick install, if /etc/hosts looks like the following on bootup... 127.0.0.1 localhost 127.0.1.1 hostname.intra.example.com hostname # The following lines are desirable for IPv6 capable hosts ::1 localhost ip6-local

[Bug 586210] Re: [R200] Crash and reboot during OpenGL line-drawing

2010-12-06 Thread Daniel Richard G.
The drivers for r200 have received a bit of work lately, both in Mesa and in the kernel. I am currently running Maverick, plus the 2.6.37-020637rc3-generic mainline kernel and packages from the xorg- edgers/radeon PPA, and am no longer having any GPU-crash problems (in Wings3D or otherwise) of the

[Bug 656100] Re: [needs 7.9.1] [radeon r200] ../../radeon/radeon_cs_gem.c:181: cs_gem_write_reloc: Assertion `boi->space_accounted' failed.

2010-12-06 Thread Daniel Richard G.
Okay, an update: I'm still running Maverick, with current packages from xorg- edgers/radeon (mesa @ git20101130), and the 2.6.37-020637rc3-generic mainline kernel. Many improvements: * The "drmRadeonCmdBuffer: -22" error is history, thanks to Alex Deucher: https://bugs.freedesktop.org/show_bug.cg

[Bug 686085] Re: xfce4-panel crashed with signal 7 in FcFontMatch()

2010-12-06 Thread Daniel Richard G.
*** This bug is a duplicate of bug 683753 *** https://bugs.launchpad.net/bugs/683753 ** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/686085 Title: xfce4-panel cr

[Bug 686085] Re: xfce4-panel crashed with signal 7 in FcFontMatch()

2010-12-06 Thread Daniel Richard G.
*** This bug is a duplicate of bug 683753 *** https://bugs.launchpad.net/bugs/683753 Nuts, I thought I had libfontconfig1-dbg installed. ** This bug has been marked a duplicate of bug 683753 xfce4-panel crashed with signal 7 in FcFontMatch() * You can subscribe to bug 683753 by following

[Bug 686091] Re: check-new-release-gtk crashed with IOError in _buildMetaReleaseFile()

2010-12-06 Thread Daniel Richard G.
** Visibility changed to: Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/686091 Title: check-new-release-gtk crashed with IOError in _buildMetaReleaseFile() -- ubuntu-bugs mailing list ubun

[Bug 686091] Re: check-new-release-gtk crashed with IOError in _buildMetaReleaseFile()

2010-12-06 Thread Daniel Richard G.
Okay, it's pretty clear what's going on: update-manager fails to open the meta-release file, so it presumes it's being run for the first time and attempts to create ~/.cache/update-manager-core, which it can't. Could the program fall back to a system-wide file (e.g. under /etc) in a case like this?

[Bug 1471377] [NEW] [regression] [trusty] chromium-browser crashed with SIGABRT in base::debug::BreakDebugger()

2015-07-03 Thread Daniel Richard G.
Public bug reported: This bug report concerns chromium-browser version 43.0.2357.81-0ubuntu0.14.04.1.1089 in Ubuntu Trusty. Previously, this system had 41.0.2272.76-0ubuntu0.14.04.1.1076 installed, and it worked correctly. Now, after an update, the browser crashes immediately upon startup with a

[Bug 1471377] Re: [regression] [trusty] chromium-browser crashed with SIGABRT in base::debug::BreakDebugger()

2015-07-03 Thread Daniel Richard G.
Correction: I have a .crash file, but cannot find what invocation of apport-{bug,cli} will attach it to an existing bug report. The crash in question may be found in the Ubuntu Error Tracker at https://errors.ubuntu.com/problem/70617e44460c73fcc19361b37a0b38c02af9090e -- You received this bug n

[Bug 1471377] Re: [regression] [trusty] chromium-browser crashed with SIGABRT in base::debug::BreakDebugger()

2015-07-05 Thread Daniel Richard G.
*** This bug is a duplicate of bug 1471645 *** https://bugs.launchpad.net/bugs/1471645 I have configured apport to submit crash traces to Launchpad and have filed a new report that way. ** This bug has been marked a duplicate of private bug 1471645 -- You received this bug notification beca

[Bug 1471645] Re: [trusty] [regression] chromium-browser crashed with SIGABRT in base::debug::BreakDebugger()

2015-07-05 Thread Daniel Richard G.
The crash is due to AppArmor. Adding the following to the profile for /usr/lib/chromium-browser/chromium-browser gets things working again: capability sys_admin, capability sys_chroot, owner @{PROC}/[0-9]*/setgroups w, owner @{PROC}/[0-9]*/gid_map w, owner @{PROC}/[0-9]*/uid_m

[Bug 606491] Re: start: Job is already running: anacron

2015-08-01 Thread Daniel Richard G.
Hi Stuart, Note that Anacron is not a daemon; it needs to be executed at boot time and intermittently thereafter (via that cron.d script). It doesn't work to have Anacron run only at boot time and Cron thereafter, because Anacron maintains state in /var/spool/anacron/ that needs to be updated eac

[Bug 1421044] Re: Too easy to accidentally restart computer when 'restart to complete update' box pop up

2015-03-05 Thread Daniel Richard G.
Hello Brian, This issue also manifests via accidental clicking (you're about to click in a regular application window, then the dialog pops up, with the "Restart Now" button right under the pointer). Changing the default focus only addresses accidental rebooting via keyboard---and even then, will

[Bug 1421044] Re: Too easy to accidentally restart computer when 'restart to complete update' box pop up

2015-03-17 Thread Daniel Richard G.
I think this bug is pretty serious from a usability perspective, given that an unplanned reboot can result in lost data and pissed-off users. I use Trusty, and would go for the SRU. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https

[Bug 785394] Re: Hard-coded crashkernel=... memory reservation in /etc/grub.d/10_linux is insufficient

2013-12-11 Thread Daniel Richard G.
Bryan: Could you elaborate on how this issue appears to be fixed in 13.04? Was the memory reservation increased to 128MB, or is the kernel now capable of booting in 64MB? Given the lack of any updates here, I'm doubtful that any progress has been made at all. Dave: Have you tried crash-booting a *

<    1   2   3   4   5   6   7   8   9   >