[Bug 2148717] Re: rust-coreutils 0.8.0 new locales apparmor accesses

[Julian Andres Klode]

issue is loss of locales in sandboxed ctx; would suggest moving locales
to align with profile for now (or adjust aa), but new path is nicer

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rust-coreutils in Ubuntu.
https://bugs.launchpad.net/bugs/2148717

Title:
  rust-coreutils 0.8.0 new locales apparmor accesses

Status in pollinate package in Ubuntu:
  New
Status in rust-coreutils package in Ubuntu:
  Triaged

Bug description:
  Between 0.7.0-0ubuntu1 and 0.8.0-0ubuntu3 rust-coreutils has new file
  accesses for at least head, cat, and touch:

  Apr 17 17:01:09 alan-resolute-eyfpotmgij kernel: audit: type=1400 audit(1776445269.452:184): apparmor="DENIED" operation="open" class="file" profile="pollinate" name="/usr/share/coreutils/locales/uucore/en-US.ftl" pid=809 comm="head" requested_mask="r" denied_mask="r" fsuid=100 ouid=0
  Apr 17 17:01:09 alan-resolute-eyfpotmgij kernel: audit: type=1400 audit(1776445269.459:185): apparmor="DENIED" operation="open" class="file" profile="pollinate" name="/usr/share/coreutils/locales/uucore/en-US.ftl" pid=812 comm="cat" requested_mask="r" denied_mask="r" fsuid=100
  ouid=0
  Apr 17 17:01:09 alan-resolute-eyfpotmgij kernel: audit: type=1400 audit(1776445269.475:186): apparmor="DENIED" operation="open" class="file" profile="pollinate" name="/usr/share/coreutils/locales/uucore/en-US.ftl" pid=819 comm="touch" requested_mask="r" denied_mask="r" fsuid=100
  ouid=0

  Maybe these have been moved from an on-demand loading to an always
  loading? That'd feel pretty wasteful, given that cat, head, touch, are
  used thousands of times more often than they need to report errors or
  help messages.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pollinate/+bug/2148717/+subscriptions