[pkg-apparmor] Bug#968951: Bug#968951: apparmor-profiles: Profile incomplete for pidgin and telepathy

intrigeri intrigeri at debian.org
Sat Oct 24 17:31:01 BST 2020


Control: reassign -1 telepathy-mission-control-5
Control: retitle -1 AppArmor profile conflicts with pidgin-openpgp

Hi,

Henning Follmann (2020-08-24):
> When you try to login to a jabber server either via empathy or pidgin
> /usr/lib/purple-2/XEP-0027.pl will be called but fails because of an
> incomplete AppArmor profile:
>
> Aug 06 19:55:20 typer audit[4039]: AVC apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-*" name="/usr/share/perl/5.28.1/strict.pm"
> +pid=4039 comm="telepathy-haze" requested_mask="r" denied
> Aug 06 19:55:20 typer org.freedesktop.Telepathy.ConnectionManager.haze[3320]: Can't locate strict.pm:   /usr/share/perl/5.28/strict.pm: Permission denied at
> +/usr/lib/purple-2/XEP-0027.pl line 31.
> Aug 06 19:55:20 typer org.freedesktop.Telepathy.ConnectionManager.haze[3320]: BEGIN failed--compilation aborted at /usr/lib/purple-2/XEP-0027.pl line 31.
> Aug 06 19:55:20 typer kernel: audit: type=1400 audit(1596758120.240:27): apparmor="DENIED" operation="open" profile="/usr/lib/telepathy/telepathy-*"
> +name="/usr/share/perl/5.28.1/strict.pm" pid=4039 comm="telepat

Reassigning to the package that ships the telepathy profile.
I suppose it's the same problem as for the usr.bin.pidgin profile,
for which I did this:
https://salsa.debian.org/apparmor-team/apparmor-profiles-extra/-/commit/eedb248ece01e65ce5572f5cc0b1a59c1bfc8f06

> or for pidgin
>
> Aug 18 09:58:17 typer audit[2790]: AVC apparmor="DENIED" operation="open" profile="/usr/bin/pidgin" name="/usr/share/perl/5.28.1/strict.pm" pid=2790 comm=
> Aug 18 09:58:17 typer kernel: audit: type=1400 audit(1597759097.069:42): apparmor="DENIED" operation="open" profile="/usr/bin/pidgin" name="/usr/share/per

The pidgin-openpgp part is tracked by https://bugs.debian.org/968607
so let's focus on Telepathy here.

Cheers!



More information about the pkg-apparmor-team mailing list