Public bug reported:

Binary package hint: firefox-3.5

on karmic, apparmor prevents an active directory user from starting firefox. An 
active directory user has his home in a folder following the pattern
/home/DOMAIN/user/
and this is probably the cause of the misbehavior. An user not belonging to 
Active Directory will be able to start FF when apparmor is on.

starting firefox when AppArmor is off will enable the Active Directory
users to see the ubuntu "search page" (default home page for FF3.5.3).

As an evidence, the /var/log/kern.log lines follow. they're related to
the lock operations on the FF .parentlock. It seems that the k mask is
being denied.

Oct 23 09:23:52 ly-qa-bellinux kernel: [88349.452412] type=1503 
audit(1256282632.601:116): operation="file_lock" pid=29900 parent=29827 
profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="wk::" 
denied_mask="k::" fsuid=1893211406 ouid=1893211406 
name="/home/ESKERCORP/bellin-salarin/.mozilla/firefox/wxr2z7j2.default/.parentlock"
Oct 23 09:23:53 ly-qa-bellinux kernel: [88349.874611] type=1503 
audit(1256282633.021:117): operation="file_lock" pid=29900 parent=29827 
profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="wk::" 
denied_mask="k::" fsuid=1893211406 ouid=1893211406 
name="/home/ESKERCORP/bellin-salarin/.pulse-cookie"
Oct 23 09:23:53 ly-qa-bellinux kernel: [88349.877534] type=1503 
audit(1256282633.025:118): operation="file_lock" pid=29900 parent=29827 
profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="wk::" 
denied_mask="k::" fsuid=1893211406 ouid=1893211406 
name="/home/ESKERCORP/bellin-salarin/.cache/event-sound-cache.tdb.f1b0a25408a48159af64e77c486e058d.i486-pc-linux-gnu"
Oct 23 09:23:53 ly-qa-bellinux kernel: [88349.879828] type=1503 
audit(1256282633.025:119): operation="file_lock" pid=29900 parent=29827 
profile="/usr/lib/firefox-3.5.*/firefox" requested_mask="wk::" 
denied_mask="k::" fsuid=1893211406 ouid=1893211406 
name="/home/ESKERCORP/bellin-salarin/.cache/event-sound-cache.tdb.f1b0a25408a48159af64e77c486e058d.i486-pc-linux-gnu"

ProblemType: Bug
Architecture: i386
Date: Fri Oct 23 09:29:17 2009
DistroRelease: Ubuntu 9.10
Package: firefox-3.5 3.5.3+build1+nobinonly-0ubuntu6
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SourcePackage: firefox-3.5
Uname: Linux 2.6.31-14-generic i686

** Affects: firefox-3.5 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug i386

-- 
apparmor prevents firefox from starting for an user who belongs to an Active 
Directory domain
https://bugs.launchpad.net/bugs/458846
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to