[Bug 1322738] [NEW] Apparmor prevents the crash reporter from working

Fri May 23 20:10:05 UTC 2014

Public bug reported:

Recently Firefox crashed on me twice. Looking at "about:crashes" showed nothing but very old crash reports.
Looking at the audit.log I found that Apparmor is not allowing the crash report to use ptrace:

type=AVC msg=audit(1400782417.435:3304): apparmor="DENIED" operation="ptrace" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=20821 comm="firefox" requested_mask="read" denied_mask="read" peer="/usr/lib/firefox/firefox{,*[^s][^h]}"
type=SYSCALL msg=audit(1400782417.435:3304): arch=c000003e syscall=0 success=no exit=-13 a0=60 a1=7f17b2501c48 a2=10 a3=22 items=0 ppid=5690 pid=20821 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=4294967295 tty=(none) comm="firefox" exe="/usr/lib/firefox/firefox" key=(null)
type=AVC msg=audit(1400874279.170:5966): apparmor="DENIED" operation="ptrace" profile="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=29895 comm="firefox" requested_mask="read" denied_mask="read" peer="/usr/lib/firefox/firefox{,*[^s][^h]}"
type=SYSCALL msg=audit(1400874279.170:5966): arch=c000003e syscall=0 success=no exit=-13 a0=33 a1=7fdaad5b6c48 a2=10 a3=22 items=0 ppid=29515 pid=29895 auid=4294967295 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=4294967295 tty=(none) comm="firefox" exe="/usr/lib/firefox/firefox" key=(null)

Those messages are not in the usual format as I run auditd but the
actual content should be the same.

More information:

$ lsb_release -rd
Description:	Ubuntu 14.04 LTS
Release:	14.04

$ apt-cache policy firefox apparmor linux-image-$(uname -r)
firefox:
  Installed: 29.0+build1-0ubuntu0.14.04.2
  Candidate: 29.0+build1-0ubuntu0.14.04.2
  Version table:
 *** 29.0+build1-0ubuntu0.14.04.2 0
        500 http://archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ trusty-security/main amd64 Packages
        100 /var/lib/dpkg/status
     28.0+build2-0ubuntu2 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
apparmor:
  Installed: 2.8.95~2430-0ubuntu5
  Candidate: 2.8.95~2430-0ubuntu5
  Version table:
 *** 2.8.95~2430-0ubuntu5 0
        500 http://archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
        100 /var/lib/dpkg/status
linux-image-3.13.0-27-generic:
  Installed: 3.13.0-27.50
  Candidate: 3.13.0-27.50
  Version table:
 *** 3.13.0-27.50 0
        500 http://archive.ubuntu.com/ubuntu/ trusty-proposed/main amd64 Packages
        100 /var/lib/dpkg/status

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: firefox 29.0+build1-0ubuntu0.14.04.2
ProcVersionSignature: Ubuntu 3.13.0-27.50-generic 3.13.11
Uname: Linux 3.13.0-27-generic x86_64
AddonCompatCheckDisabled: False
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
AudioDevicesInUse:
 USER        PID ACCESS COMMAND
 /dev/snd/controlC0:  simon      4895 F.... pulseaudio
 /dev/snd/pcmC0D0p:   simon      4895 F...m pulseaudio
BuildID: 20140428193813
Channel: Unavailable
CurrentDesktop: Unity
CurrentDmesg: dmesg: klogctl failed: Operation not permitted
Date: Fri May 23 15:50:44 2014
DefaultProfileIncompatibleExtensions:
 Français Language Pack - langpack-fr at firefox.mozilla.org
 Default - {972ce4c6-7e08-4474-a285-3208198ce6fd}
DefaultProfilePlugins:
 Google Talk Plugin - /opt/google/talkplugin/libnpgoogletalk.so (google-talkplugin)
 Google Talk Plugin Video Renderer - /opt/google/talkplugin/libnpo1d.so (google-talkplugin)
 TLSAValidatorPlugin_x86_64 - [Profile]/extensions/dnssec at nic.cz/plugins/npTLSAValidatorPlugin_x64.so
 DNSSECValidatorPlugin_x86_64 - [Profile]/extensions/dnssec at nic.cz/plugins/npDNSSECValidatorPlugin_x64.so
 Shockwave Flash - /usr/lib/adobe-flashplugin/libflashplayer.so (adobe-flashplugin)
DefaultProfilePrefSources:
 prefs.js
 [Profile]/extensions/https-everywhere at eff.org/defaults/preferences/preferences.js
 [Profile]/extensions/dnssec at nic.cz/defaults/preferences/dnssec.js
ForcedLayersAccel: False
InstallationDate: Installed on 2014-01-26 (116 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Alpha amd64 (20140124)
Profile1IncompatibleExtensions: Default - {972ce4c6-7e08-4474-a285-3208198ce6fd}
Profile1Plugins:
 Google Talk Plugin - /opt/google/talkplugin/libnpgoogletalk.so (google-talkplugin)
 Google Talk Plugin Video Renderer - /opt/google/talkplugin/libnpo1d.so (google-talkplugin)
 Shockwave Flash - /usr/lib/adobe-flashplugin/libflashplayer.so (adobe-flashplugin)
Profile1PrefSources:
 prefs.js
 [Profile]/extensions/https-everywhere at eff.org/defaults/preferences/preferences.js
Profile2IncompatibleExtensions: Default - {972ce4c6-7e08-4474-a285-3208198ce6fd}
Profile2Plugins:
 TLSAValidatorPlugin_x86_64 - [Profile]/extensions/dnssec at nic.cz/plugins/npTLSAValidatorPlugin_x64.so
 DNSSECValidatorPlugin_x86_64 - [Profile]/extensions/dnssec at nic.cz/plugins/npDNSSECValidatorPlugin_x64.so
 Shockwave Flash - /usr/lib/flashplugin-installer/libflashplayer.so
 Google Talk Plugin - /opt/google/talkplugin/libnpgoogletalk.so (google-talkplugin)
 Google Talk Plugin Video Renderer - /opt/google/talkplugin/libnpo1d.so (google-talkplugin)
Profile2PrefSources:
 prefs.js
 [Profile]/extensions/dnssec at nic.cz/defaults/preferences/dnssec.js
Profiles:
 Profile0 (Default) - LastVersion=29.0/20140428193813 (In use)
 Profile1 - LastVersion=29.0/20140428193813
 Profile2 - LastVersion=28.0/20140410211200 (Out of date)
RfKill:
 0: phy0: Wireless LAN
 	Soft blocked: no
 	Hard blocked: no
RunningIncompatibleAddons: True
SourcePackage: firefox
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 02/14/2013
dmi.bios.vendor: LENOVO
dmi.bios.version: 6IET85WW (1.45 )
dmi.board.name: 2516CTO
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr6IET85WW(1.45):bd02/14/2013:svnLENOVO:pn2516CTO:pvrThinkPadT410:rvnLENOVO:rn2516CTO:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 2516CTO
dmi.product.version: ThinkPad T410
dmi.sys.vendor: LENOVO

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

** Tags: amd64 apport-bug trusty

** Attachment removed: "WifiSyslog.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118623/+files/WifiSyslog.txt

** Attachment removed: "IpAddr.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118607/+files/IpAddr.txt

** Attachment removed: "IwConfig.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118609/+files/IwConfig.txt

** Attachment removed: "AlsaInfo.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118597/+files/AlsaInfo.txt

** Attachment removed: "IfupdownConfig.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118606/+files/IfupdownConfig.txt

** Attachment removed: "PulseList.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118621/+files/PulseList.txt

** Attachment removed: "IpRoute.txt"
   https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+attachment/4118608/+files/IpRoute.txt

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1322738

Title:
  Apparmor prevents the crash reporter from working

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1322738/+subscriptions