Bug #10455

Totem cannot access DVD readers

Added by hybridwipe 2015-10-29 17:12:04 . Updated 2015-12-07 17:01:01 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Hardware support
Target version:
Start date:
2015-10-29
Due date:
% Done:

100%

Feature Branch:
bugfix/10455-aa-p-e-1.6
Type of work:
Debian
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

Noticed in Feature #7674.

Apparmor prevents totem accessing /dev/sr0. If apparmor is stopped (sudo /etc/init.d/apparmor stop && sudo /etc/init.d/apparmor teardown), then totem can access the dvd and playback works (with patch applied).


Subtasks


Related issues

Related to Tails - Bug #9990: Totem freezes when trying to disable visual effects Resolved 2015-08-13
Blocks Tails - Feature #7674: Allow users to watch CSS protected DVDs Resolved 2014-07-28

History

#1 Updated by intrigeri 2015-10-31 08:19:18

  • blocks Feature #7674: Allow users to watch CSS protected DVDs added

#2 Updated by intrigeri 2015-10-31 08:25:58

  • Status changed from New to Confirmed
  • Target version changed from Tails_1.8 to 246

Hint: this should be fixed in http://bazaar.launchpad.net/~apparmor-dev/apparmor-profiles/master/ and then in the apparmor-profiles-extra Debian package.

#3 Updated by hybridwipe 2015-11-01 19:44:36

  • Assignee set to hybridwipe

I sent a patch upstream:
https://lists.ubuntu.com/archives/apparmor/2015-November/008751.html

#4 Updated by intrigeri 2015-11-02 01:08:39

  • Status changed from Confirmed to In Progress

#5 Updated by intrigeri 2015-11-14 04:25:05

  • Assignee changed from hybridwipe to intrigeri
  • Type of work changed from Code to Debian

Thanks! Your patch was applied upstream (r153) and I’ll update apparmor-profiles-extra.

#6 Updated by intrigeri 2015-11-14 05:46:20

  • Subject changed from Totem cannot access /dev/sr0 to Totem cannot access DVD readers
  • Target version changed from 246 to Tails_2.0
  • % Done changed from 0 to 30

intrigeri wrote:
> I’ll update apparmor-profiles-extra.

Uploaded aa-p-e 1.6 to sid. Next step is to backport it for Jessie, upload to jessie-backports, and set up our feature/jessie branch to install the backport. (I’m not going to spend any of my time fixing this on Tails/Wheezy at this point.)

#7 Updated by hybridwipe 2015-11-15 21:20:01

intrigeri wrote:
> Thanks! Your patch was applied upstream (r153) and I’ll update apparmor-profiles-extra.

For reference, it’s https://bazaar.launchpad.net/~apparmor-dev/apparmor-profiles/master/revision/153

#8 Updated by intrigeri 2015-11-21 03:05:54

intrigeri wrote:
> intrigeri wrote:
> > I’ll update apparmor-profiles-extra.
>
> Uploaded aa-p-e 1.6 to sid. Next step is to backport it for Jessie,

The package migrated to testing so we can now do that.

#9 Updated by intrigeri 2015-11-30 14:04:06

  • related to Bug #9990: Totem freezes when trying to disable visual effects added

#10 Updated by intrigeri 2015-12-01 07:49:17

  • % Done changed from 30 to 40

Uploaded 1.6~bpo8+1 to jessie-backports.

#11 Updated by intrigeri 2015-12-07 13:37:57

apparmor-profiles-extra_1.6~bpo8+1_i386.changes ACCEPTED into jessie-backports, jessie-backports

#12 Updated by intrigeri 2015-12-07 15:19:20

  • Feature Branch set to bugfix/10455-aa-p-e-1.6

The upgrade to aa-p-e breaks the startup of apparmor.service:

Dec 07 22:15:01 amnesia apparmor[249]: profile has merged rule with conflicting x modifiers
Dec 07 22:15:01 amnesia apparmor[249]: ERROR processing regexs for profile launchpad_integration, failed to load
Dec 07 22:15:01 amnesia apparmor[249]: failed!

#13 Updated by intrigeri 2015-12-07 15:27:20

… but indeed it drops the AppArmor denials when accessing the DVD.

#14 Updated by hybridwipe 2015-12-07 15:29:59

intrigeri wrote:
> … but indeed it drops the AppArmor denials when accessing the DVD.

Wooooo!

intrigeri wrote:
> The upgrade to aa-p-e breaks the startup of apparmor.service:
>
> […]

Not woo.

#15 Updated by intrigeri 2015-12-07 15:45:07

intrigeri wrote:
> The upgrade to aa-p-e breaks the startup of apparmor.service:

… that’s due to a usr.bin.pidgin.orig being left over. Apparently our build hook that detects such problems is not perfect. Indeed there’s also /etc/init.d/alsa-utils.orig.

#16 Updated by intrigeri 2015-12-07 16:58:23

  • Status changed from In Progress to Resolved
  • % Done changed from 40 to 100

Applied in changeset commit:dac5cce1c5ad529485f5d506db6e469066daddbb.

#17 Updated by intrigeri 2015-12-07 17:01:01

  • Assignee deleted (intrigeri)