Bug 1174290 – AppArmor abstractions/X does not allow access to /run/user xauth

Bug 1174290 - AppArmor abstractions/X does not allow access to /run/user xauth


Summary:	AppArmor abstractions/X does not allow access to /run/user xauth

Status:	RESOLVED FIXED
Duplicates:	1174293 (view as bug list)

Classification:	openSUSE
Product:	openSUSE Tumbleweed
Classification:	openSUSE
Component:	AppArmor
Version:	Current
Hardware:	Other openSUSE Factory

Priority:	P5 - None Severity: Normal (vote)
Target Milestone:	---
Assigned To:	Christian Boltz
QA Contact:	E-mail List

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2020-07-20 02:52 UTC by Tejas Guruswamy
Modified:	2020-07-20 19:30 UTC (History)
CC List:	1 user (show)

See Also:
Found By:	---
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Tejas Guruswamy 2020-07-20 02:52:16 UTC

Shipped "abstractions/X" does not allow access to the new Xauthority file path at
/run/user/{UID}/xauth_*

e.g. /run/user/1000/xauth_yfDehn

this causes graphical apps with an apparmor profile to fail.

Not sure if best method is to allow access via env var $XAUTHORITY or with a glob.

Comment 1 Fabian Vogt 2020-07-20 07:00:48 UTC

*** Bug 1174293 has been marked as a duplicate of this bug. ***

Comment 2 OBSbugzilla Bot 2020-07-20 17:30:06 UTC

This is an autogenerated message for OBS integration:
This bug (1174290) was mentioned in
https://build.opensuse.org/request/show/821964 Factory / redshift

Comment 3 Christian Boltz 2020-07-20 18:54:24 UTC

SR 821972 sent.

Comment 4 OBSbugzilla Bot 2020-07-20 19:30:07 UTC

This is an autogenerated message for OBS integration:
This bug (1174290) was mentioned in
https://build.opensuse.org/request/show/821972 Factory / apparmor