UBports Robot Logo UBports Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    Webview apparmor

    Scheduled Pinned Locked Moved Google Pixel 3a/3a XL
    2 Posts 1 Posters 456 Views 1 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
      Reply
      • Reply as topic
      Log in to reply
      This topic has been deleted. Only users with topic management privileges can see it.
      • B Offline
        Bouleetbil
        last edited by

        Hi,
        I use UBports RC release with my pixel3a and when I start application with a custom WebEngineProfile as uteezer https://github.com/Tafitson/uteezer/blob/main/app/Main.qml apparmor denied access.

        phablet@ubuntu-phablet:~$ dmesg | grep denied
[    4.820103] init: Command 'write /sys/devices/system/cpu/cpu0/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:106) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu0/online': open() failed: Permission denied
[    4.820280] init: Command 'write /sys/devices/system/cpu/cpu1/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:107) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu1/online': open() failed: Permission denied
[    4.820433] init: Command 'write /sys/devices/system/cpu/cpu2/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:108) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu2/online': open() failed: Permission denied
[    4.820582] init: Command 'write /sys/devices/system/cpu/cpu3/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:109) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu3/online': open() failed: Permission denied
[    4.820871] init: Command 'write /sys/devices/system/cpu/cpu4/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:110) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu4/online': open() failed: Permission denied
[    4.821022] init: Command 'write /sys/devices/system/cpu/cpu5/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:111) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu5/online': open() failed: Permission denied
[    4.823653] init: Command 'write /sys/devices/system/cpu/cpu6/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:112) took 2ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu6/online': open() failed: Permission denied
[    4.823881] init: Command 'write /sys/devices/system/cpu/cpu7/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:113) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu7/online': open() failed: Permission denied
[   75.263007] audit: type=1400 audit(1666041558.975:142): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/proc/6378/setgroups" pid=6378 comm="qmlscene" requested_mask="w" denied_mask="w" fsuid=32011 ouid=32011
[   75.361540] audit: type=1400 audit(1666041559.071:143): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/proc/sys/kernel/yama/ptrace_scope" pid=6381 comm="QtWebEngineProc" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0
[   75.390934] audit: type=1400 audit(1666041559.101:144): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/sys/devices/system/cpu/cpu0/regs/identification/midr_el1" pid=6347 comm="qmlscene" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0
[   75.425676] audit: type=1400 audit(1666041559.138:145): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/proc/sys/fs/inotify/max_user_watches" pid=6347 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0
[   75.755764] audit: type=1400 audit(1666041559.468:147): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/proc/6347/loginuid" pid=6347 comm="qmlscene" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
[   75.896404] audit: type=1400 audit(1666041559.608:148): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/proc/6401/oom_score_adj" pid=6347 comm="ThreadPoolSingl" requested_mask="wc" denied_mask="wc" fsuid=32011 ouid=32011
[   75.900533] audit: type=1400 audit(1666041559.611:149): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/sys/devices/system/cpu/cpu0/regs/identification/midr_el1" pid=6401 comm="QtWebEngineProc" requested_mask="r" denied_mask="r" fsuid=32011 ouid=0
[   75.942251] audit: type=1400 audit(1666041559.654:150): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/home/phablet/.cache/qtshadercache-arm64-little_endian-lp64/5cc098bc5354d98253495e89cc26ca4ba78a3a15" pid=6347 comm="QSGRenderThread" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
[   75.991330] audit: type=1400 audit(1666041559.701:151): apparmor="DENIED" operation="open" profile="uteezer.tafitson_uteezer_0.7.3" name="/home/phablet/.cache/qtshadercache-arm64-little_endian-lp64/#2557890" pid=6347 comm="QSGRenderThread" requested_mask="wr" denied_mask="wr" fsuid=32011 ouid=32011

        The policy https://github.com/Tafitson/uteezer/blob/main/uteezer.apparmor seems good and I've this problem with all applications started with a custom custom WebEngineProfile.
        If someone have an idea :beaming_face_with_smiling_eyes:

        FP5 24.04 RC daily use with pinetime
        Pixel 3a 24.04-2
        Redmi 9S 24.04-2
        PinePhonePro Mobian/Postmarketos

        1 Reply Last reply Reply Quote 0
        • B Offline
          Bouleetbil
          last edited by

          Hello,
          I've installed with the installer 0.9.7-beta the stable/rc and devel version on my pixel3a and I've some errors with apparmor. For each version I've wipe data

          hablet@ubuntu-phablet:~$ sudo dmesg | grep denied
[    5.052271] init: Command 'write /sys/devices/system/cpu/cpu0/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:106) took 1ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu0/online': open() failed: Permission denied
[    5.052995] init: Command 'write /sys/devices/system/cpu/cpu1/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:107) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu1/online': open() failed: Permission denied
[    5.054302] init: Command 'write /sys/devices/system/cpu/cpu2/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:108) took 1ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu2/online': open() failed: Permission denied
[    5.054536] init: Command 'write /sys/devices/system/cpu/cpu3/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:109) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu3/online': open() failed: Permission denied
[    5.054751] init: Command 'write /sys/devices/system/cpu/cpu4/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:110) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu4/online': open() failed: Permission denied
[    5.054909] init: Command 'write /sys/devices/system/cpu/cpu5/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:111) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu5/online': open() failed: Permission denied
[    5.055574] init: Command 'write /sys/devices/system/cpu/cpu6/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:112) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu6/online': open() failed: Permission denied
[    5.055749] init: Command 'write /sys/devices/system/cpu/cpu7/online 1' action=vendor.skip.init=0 && init (/vendor/etc/init/hw/init.sdm670.rc:113) took 0ms and failed: Unable to write to file '/sys/devices/system/cpu/cpu7/online': open() failed: Permission denied
[   17.087618] audit: type=1400 audit(1666711957.650:72): apparmor="DENIED" operation="open" profile="/usr/bin/media-hub-server" name="/proc/4338/timerslack_ns" pid=4121 comm="gst-plugin-scan" requested_mask="w" denied_mask="w" fsuid=32011 ouid=32011
[   18.492002] audit: type=1400 audit(1666711959.053:73): apparmor="DENIED" operation="open" profile="/usr/bin/media-hub-server" name="/proc/4656/timerslack_ns" pid=4651 comm="gst-plugin-scan" requested_mask="w" denied_mask="w" fsuid=32011 ouid=32011
[   19.548700] audit: type=1400 audit(1666711960.110:74): apparmor="DENIED" operation="open" profile="/usr/bin/media-hub-server" name="/proc/4837/timerslack_ns" pid=4108 comm="media-hub-serve" requested_mask="w" denied_mask="w" fsuid=32011 ouid=32011
[   19.549695] audit: type=1400 audit(1666711960.110:75): apparmor="DENIED" operation="open" profile="/usr/bin/media-hub-server" name="/proc/4839/timerslack_ns" pid=4108 comm="Binder:4108_1" requested_mask="w" denied_mask="w" fsuid=32011 ouid=32011

          Am I the only one with this problem ?

          FP5 24.04 RC daily use with pinetime
          Pixel 3a 24.04-2
          Redmi 9S 24.04-2
          PinePhonePro Mobian/Postmarketos

          1 Reply Last reply Reply Quote 0

          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

          With your input, this post could be even better 💗

          Register Login
          • First post
            Last post