[Bug 1197047] Re: SDK applications create /tmp/*.sci files

[Jamie Strandboge]

Adding upstart-app-launch and click tasks. /usr/share/click/hooks
/upstart-app-launch-desktop.hook should use aa-exec-click and if we
continue shipping /usr/share/click/hooks/click-desktop.hook as part of
click, it should too.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to click in Ubuntu.
https://bugs.launchpad.net/bugs/1197047

Title:
  SDK applications create /tmp/*.sci files

Status in Ubuntu UI Toolkit:
  Invalid
Status in “apparmor-easyprof-ubuntu” package in Ubuntu:
  Fix Released
Status in “click” package in Ubuntu:
  New
Status in “upstart-app-launch” package in Ubuntu:
  Triaged

Bug description:
  Launching an Ubuntu SDK (QML) application under application confinement results in the following denial:
  apparmor="DENIED" operation="mknod" parent=8803 profile="ubuntu-calculator-app" name="/tmp/TJ8938.sci" pid=8938 comm="qmlscene" requested_mask="c" denied_mask="c" fsuid=32011 ouid=32011

  We currently have the following AppArmor rule to deal with this:
     owner /tmp/*.sci rwk,

  But this rule is too lenient and this path needs to be made
  application specific. Specifically: $XDG_RUNTIME_DIR/<app id> where
  '<app id>' will ultimately be the reverse domain name with Click
  packages (see bug #1197037 for details on '<app id>').

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-ui-toolkit/+bug/1197047/+subscriptions