[apparmor] Weird problem with LD_LIBRARY_PATH

[Seth Arnold]

On Tue, May 06, 2014 at 08:40:09AM +0800, Aaron Lewis wrote:
> 
> %> cat /opt/chromium/chromium/chromium.sh
> #!/bin/bash
> 
> export LD_LIBRARY_PATH=/opt/chromium/libs/
> /opt/chromium/chromium/chromium "$@"
> 
> When I enforce the opt.chromium.chromium.chromium.sh policy, it says:
> (No problem running it if aa is diabled)
> %> /opt/chromium/chromium/chromium.sh
> /opt/chromium/chromium/chromium: error while loading shared libraries:
> libicui18n.so.52: cannot open shared object file: No such file or
> directory
> 
> But I already have: "/opt/chromium/libs/* rm," in that profile, anything wrong?
> 
> That profile is for "/opt/chromium/chromium/chromium", not the script though

LD_LIBRARY_PATH adds to the library path, it doesn't replace it entirely;
on my system, this library is in /usr/lib/x86_64-linux-gnu/libicui18n.so.52.1

Does this library exist in /opt/chromium/libs/ or elsewhere in a path
referenced via /etc/ld.so.conf or one of ld.so's defaults?
Does your profile allow 'rm' access to this library?

Hopefully your system logs will contain more information; if not in
/var/log/syslog then perhaps in /var/log/audit/audit.log.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140505/b0bc83a5/attachment.pgp>