[pkg-apparmor] Bug#968951: apparmor-profiles: Profile incomplete for pidgin and telepathy

[Henning Follmann]

Package: apparmor-profiles
Version: 2.13.2-10
Severity: important

Dear Maintainer,

When you try to login to a jabber server either via empathy or pidgin
/usr/lib/purple-2/XEP-0027.pl will be called but fails because of an
incomplete AppArmor profile:

Aug 06 19:55:20 typer audit[4039]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-*" name="/usr/share/perl/5.28.1/strict.pm"
+pid=4039 comm="telepathy-haze" requested_mask="r" denied
Aug 06 19:55:20 typer org.freedesktop.Telepathy.ConnectionManager.haze[3320]: Can't locate strict.pm:   /usr/share/perl/5.28/strict.pm: Permission denied at
+/usr/lib/purple-2/XEP-0027.pl line 31.
Aug 06 19:55:20 typer org.freedesktop.Telepathy.ConnectionManager.haze[3320]: BEGIN failed--compilation aborted at /usr/lib/purple-2/XEP-0027.pl line 31.
Aug 06 19:55:20 typer kernel: audit: type=1400 audit(1596758120.240:27): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-*"
+name="/usr/share/perl/5.28.1/strict.pm" pid=4039 comm="telepat

or for pidgin

Aug 18 09:58:17 typer audit[2790]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/pidgin" name="/usr/share/perl/5.28.1/strict.pm" pid=2790 comm=
Aug 18 09:58:17 typer kernel: audit: type=1400 audit(1597759097.069:42): apparmor="DENIED" operation="open" profile="/usr/bin/pidgin" name="/usr/share/per


In both cases access to strict.pm fails.



-H





-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (90, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.7.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages apparmor-profiles depends on:
ii  apparmor  2.13.2-10

apparmor-profiles recommends no packages.

apparmor-profiles suggests no packages.

-- no debconf information