Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

apparmor breaks dbus-*=filter #3432

Closed
rusty-snake opened this issue May 23, 2020 · 4 comments
Closed

apparmor breaks dbus-*=filter #3432

rusty-snake opened this issue May 23, 2020 · 4 comments
Labels
bug Something isn't working

Comments

@rusty-snake
Copy link
Collaborator

Ubuntu 20.04:

command: firejail --dbus-user=filter --dbus-user.own=org.gnome.gedit --dbus-user.talk=ca.desrt.dconf --apparmor gedit
note: settings are imutable

journal: AVC apparmor="DENIED" operation="connect" profile="firejail-default" name="/run/firejail/dbus/1000/5813-user" pid=5819 comm="gedit" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
@rusty-snake rusty-snake added the bug Something isn't working label May 23, 2020
@Vincent43
Copy link
Collaborator

Vincent43 commented May 28, 2020 •
edited
Loading

@rusty-snake try adding in firejail-default and reload it:

owner /{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w,

or
/{,var/}run/firejail/dbus/[0-9]*/[0-9]*-user w,

@rusty-snake
Copy link
Collaborator Author

💯

@curiosityseeker
Copy link
Collaborator

So shouldn't this rule added to firejail-default by default?

@Vincent43
Copy link
Collaborator

It should

curiosityseeker added a commit that referenced this issue Jun 1, 2020
@curiosityseeker
Avoid dbus-*=filter breakage (#3432)
6a28923
@matu3ba matu3ba mentioned this issue Oct 7, 2021
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@Vincent43 @rusty-snake @curiosityseeker