Adding the following two permissions to the apparmor profile solves the
problem:

  @{PROC}/[0-9]*/mounts r
  /dev/disks/by-label/ r

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1414625

Title:
  Temporarily grant additional rights to camera-app so it can read free
  disk space

Status in apparmor-easyprof-ubuntu package in Ubuntu:
  New

Bug description:
  To fix a critical bug for RTM we need camera app to be able to know how much 
free disk space is available. The bug is 
  https://bugs.launchpad.net/barajas/+bug/1405211

  To do this it uses a library (that will be part of QT 5.4 when it is
  released) that reads some system files in /proc and /dev that at the
  moment generate the following denials:

  [10846.769018] type=1400 audit(1422275993.028:285): apparmor="DENIED" 
operation="open" profile="com.ubuntu.camera_camera_3.0.0.493" 
name="/proc/22701/mounts" pid=22701 comm="camera-app" requested_mask="r" 
denied_mask="r" fsuid=32011 ouid=32011
  [10846.769192] type=1400 audit(1422275993.028:286): apparmor="DENIED" 
operation="open" profile="com.ubuntu.camera_camera_3.0.0.493" 
name="/dev/disk/by-label/" pid=22701 comm="camera-app" requested_mask="r" 
denied_mask="r" fsuid=32011 ouid=0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1414625/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to