AppArmor is blocking Firefox installed via snap
Open, Needs TriagePublic

Description

Firefox 62.0-2 fails to launch after recent updates. It is installed via snap.
gnome-logs shows that AppArmor is denying something with snap.

Wayne added a subscriber: Wayne.Sep 21 2018, 9:14 PM

It appears that 62.0.2 (not 62.0-2) was released today by Mozilla. When it is available in snap, you may want to try it to see if it fixes your problem.

nochelibre added a comment.EditedSep 22 2018, 4:19 AM

gnome-logs shows that AppArmor is denying something with snap, which is how I've installed Firefox. Firefox had not been updated in a while, so something else was changed during one of the recent PureOS updates. I'm not new to the concept of reverse firewalls, but I'm a complete newbie to AppArmor, so will have to dig in.

From gnome-logs:

audit: type=1400 audit(1537589776.280:85): apparmor="DENIED" operation="ptrace" profile="/usr/lib/snapd/snap-confine" pid=28612 comm="snap-confine" requested_mask="read" denied_mask="read" peer="unconfined"

nochelibre changed the title from "Firefox fails to launch after recent updates" to "AppArmor is blocking Firefox from launching after recent updates".Sep 22 2018, 4:22 AM
nochelibre edited the task description. (Show Details)
Wayne added a comment.Sep 22 2018, 1:31 PM

I am glad you isolated the problem. Having been a developer in a previous life, I was only thinking that maybe Mozilla fixed something that might have coincided with the updates.

In any case, I have be struggling mightily with apparmor on Firefox, because I took away its universal reads. (Part of that is ignorance of apparmor; I too am new to it.) Insodoing, I noticed there are many Firefox profiles circulating. Consequently, my suggestion would be to compare the latest apparmor profile in snap (github?) with what you have on your system. It may very well have that 'read' permission. It seems to me that snap would need to other, specific processes.

jonas.smedegaard changed the title from "AppArmor is blocking Firefox from launching after recent updates" to "AppArmor is blocking Firefox installed via snap".Sep 24 2018, 5:08 PM

As of today 2018-10-08, after intervening system updates, this issue persists. In the meantime I had to install an Xubuntu VM in Boxes, and then install Firefox within the VM.

Add Comment