Apparmor enforce mode prevents Firefox from reading U2F security key

When the default apparmor profile for Firefox is set to enforce mode, it blocks Firefox access to security keys. Disabling the profile restores access.

Rules that I’ve tried and failed:

  • /sys/devices/** r,
  • #include <abstractions/dbus>
  • dbus send bus=system path=/org/freedesktop/RealtimeKit1 interface=org.freedesktop.DBus.Properties member=Get peer=(name=org.freedesktop.RealtimeKit1)

Can someone help me craft rules to allow Firefox access security keys?

kern.log:

Sep 17 19:07:01 user-pc kernel: [21606.295620] usb 7-2: new full-speed USB device number 4 using uhci_hcd Sep 17 19:07:01 user-pc kernel: [21606.487632] usb 7-2: New USB device found, idVendor=1050, idProduct=0120, bcdDevice= 4.33 Sep 17 19:07:01 user-pc kernel: [21606.487636] usb 7-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0 Sep 17 19:07:01 user-pc kernel: [21606.487638] usb 7-2: Product: Security Key by Yubico Sep 17 19:07:01 user-pc kernel: [21606.487639] usb 7-2: Manufacturer: Yubico Sep 17 19:07:01 user-pc kernel: [21606.495139] hid-generic 0003:1050:0120.0005: hiddev0,hidraw2: USB HID v1.10 Device [Yubico Security Key by Yubico] on usb-0000:00:1d.1-2/input0 Sep 17 19:07:34 user-pc kernel: [21639.275573] audit: type=1400 audit(1568714854.720:331): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/firefox/firefox{,*[^s][^h]}" pid=21659 comm="apparmor_parser" Sep 17 19:07:34 user-pc kernel: [21639.275577] audit: type=1400 audit(1568714854.724:332): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/firefox/firefox{,*[^s][^h]}//lsb_release" pid=21659 comm="apparmor_parser" Sep 17 19:07:34 user-pc kernel: [21639.275580] audit: type=1400 audit(1568714854.724:333): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/firefox/firefox{,*[^s][^h]}//sanitized_helper" pid=21659 comm="apparmor_parser" Sep 17 19:07:41 user-pc kernel: [21645.812202] audit: type=1107 audit(1568714861.260:334): pid=1061 uid=103 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/RealtimeKit1" interface="org.freedesktop.DBus.Properties" member="Get" mask="send" name="org.freedesktop.RealtimeKit1" pid=21662 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=1858 peer_label="unconfined" Sep 17 19:07:41 user-pc kernel: [21645.812202]  exe="/usr/bin/dbus-daemon" sauid=103 hostname=? addr=? terminal=?' Sep 17 19:07:42 user-pc kernel: [21646.966062] audit: type=1107 audit(1568714862.416:335): pid=1061 uid=103 auid=4294967295 ses=4294967295 msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/org/freedesktop/RealtimeKit1" interface="org.freedesktop.DBus.Properties" member="Get" mask="send" name="org.freedesktop.RealtimeKit1" pid=21703 label="/usr/lib/firefox/firefox{,*[^s][^h]}" peer_pid=1858 peer_label="unconfined" Sep 17 19:07:42 user-pc kernel: [21646.966062]  exe="/usr/bin/dbus-daemon" sauid=103 hostname=? addr=? terminal=?' 

Firefox in Zombie mode?

Since this morning, after an update that asked to restart firefox, ti stays in zombie mode.

I can kill it through gui or with terminal but always come back in zombie when I start firefox again.

I restart laptop. I reinstalled firefox, suppressed it and reinstalled… through synaptic or terminal. Nthing seems to help.

Ubuntu mate 18.04 ; firefox 69.0

Any idea ?

Thks already !! Esteban

How to enable keyboard in tablet mode (HP Spectre x360)

HP Spectre x360 laptops have a hinge screen that can turn 360 degrees. It can be folded to imitate a tablet, for example. When you do fold it, Ubuntu enters its tablet mode — keyboard and touch-pad will be disabled.

I want to stop that. I’d like to keep keyboard and touch-pad on so that I could connect to an external display and still be able to use them. I’ve done some googling and found a few solutions:

  • On Windows, you can do this by disabling the Inter(R) Integrated Sensor Solution driver. I have Windows installed parallel to Ubuntu, so I tried doing that. It helped solve the problem while I’m in Windows, however, when I go back to Ubuntu, the problem remains.

  • On Ubuntu, people generally recommend using the xinput command to control input devices (e.g. inable/disable them). But it doesn’t seem to reflect the real state of affairs… For example, right now I’m typing this using an external keyboard and mouse; embedded keyboard and touch-pad are de-facto disabled — I cannot use them — as the screen is folded and tablet mode active. Yet, if I run xinput and check the props of my touch-pad, it reports it as being enabled.

Here are some pictures of xinput betraying me… 🙂 As you can see on the second screenshot it says Device Enabled (154): 1 which is a plain lie. Trying to run xinput --enable 18 anyways gives nothing — touch-pad stays disabled.

xinput list

xinput –list-props 18

Another program, acpi_listen seems to catch that moment of folding the screen. It prints video/tabletmode TBLT 0000008A 00000000 every time I do that. Although I am not sure as to how to use that to resolve the issue.

It seems like the problem is deeper, at the hardware level, but I’m not an expert yet, so I’m asking for help. How can I prevent keyboard and touch-pad from being disabled?

How can I isolate the cause of poor performance whne running X-Plane 11 in windowed mode?

I used to run X-Plane 11 (flight simulator) when I was on Ubuntu 16.04 and had no performance issues other than when I pushed the limitations of my hardware. So, everything worked exactly as expected. However, after upgrading the 18.04, I can only achieve good performance when running XP11 in fullscreen mode and when XP11 has focus. If I carry my mouse to another monitor and shift focus to another program (e.g., firefox), my entire computer stutters. Furthermore, if I try to run the game in windowed mode my computer stutters horribly regardless of which program has focus. I do not believe my problem is with a necessary bottleneck in the system, because my CPU, GPU, and RAM are never maxed out when running the game. Furthermore, XP11 says I’m getting 40-60FPS while I’m experiencing the stuttering.

I submitted a support ticket to the XP11 devs, but received a very short response to the effect of “Sorry, we don’t support Linux”. This leaves me a bit uncertain about how to proceed. It seems like the problem is on the OS side rather than with XP11, but I’m not certain how to begin eliminating possible causes. Here are some relevant details:

System Specs:

  • Graphics card: Sapphire Radeon R9 280
  • Graphics drivers: Default Open-Source AMD drivers
  • CPU: i5-4690K
  • RAM: 16GB DDR3
  • Three monitors (can provide more detail if needed)
  • Game is X-Plane 11 version 11.36r2 run through Steam

I’m considering trying to use a different set of drivers, but in the past when I’ve experimented with graphics driver’s I’ve ended up a sad panda for one reason or another (e.g., monitors go blank when booting up). Furthermore, I have no other issues with other games or programs so I’m a bit concerned about creating more problems. In any case, I’m willing to try messing around with graphics drivers if I need to, but I wanted to get some input before I start toying with an otherwise perfectly stable system.

how to use media queries with javascript in my web parts – classic mode

I have a site that is using the pnp responsive and the webparts are responsive. But i’m using a jquery (easypaginate.js) in the webpart.

When i resize my webpart how can i dynamically change the step option to show only 3 li items when i resize the screen to let say 500px using (media queries) @media (max-width: 500px)

Below is the default setting options

$  ('ul#items').easyPaginate({         step:7,         nextprev:false,         numeric:true     });  } 

I want the step to be 3 when i go on a smaller screen. Thanks in Advance

Embedding Microsoft forms in SharePoint online to show (Questions and Responses) – Classic mode

I would like to use the Microsoft forms for a quick poll on an intranet (Classic mode) and was wondering if there is a way to redirect the user to the responses page/link after a survey or poll has been submitted? Or a way to have the questions and responses tabbed side by side?

Any resources or tips would be appreciated

Infopath Form – Edit Mode – Error related to list view threshold in SharePoint Online

I have an Infopath 2007 Form. When I open the edit form(already saved form) , I am getting the below error:

The query cannot be run for the following DataObject: MyFormGetInfo InfoPath cannot run the specified query. The SOAP response indicates that an error occurred on the server: Exception of type 'Microsoft.SharePoint.SoapServer.SoapServerException' was thrown. The attempted operation is prohibited because it exceeds the list view threshold enforced by the administrator.0x80070024  

I dont get this error when I open a new form , make some updates and save it for first time.

Once a form is saved, when I open the Edit Form only then I see this error. Inspite of this error, I still can make updates to the form and data is saved.

Can anyone suggest how to get rid of this?

Since this is SharePoint Online, we cannot change the listview threshold. Please suggest! Thanks in advance!

Error enabling monitor mode using airmon-ng

When I try to start monitor mode on my laptop, it just returns this:

Found 5 processes that could cause trouble. If airodump-ng, aireplay-ng or airtun-ng stops working after a short period of time, you may want to run 'airmon-ng check kill'    PID Name   549 avahi-daemon   614 avahi-daemon   790 wpa_supplicant   792 NetworkManager  1163 dhclient  PHY Interface   Driver      Chipset  phy0    wlp2s0      wl      Broadcom Inc. and subsidiaries BCM4313 802.11bgn Wireless Network Adapter (rev 01)          (experimental wl monitor mode vif already enabled for [phy0]wlp2s0 on [phy0]prism0) 

So then I use the check kill command like it suggests

sudo airmmon-ng check kill  Killing these processes:    PID Name   790 wpa_supplicant 17141 avahi-daemon 17144 avahi-daemon 

Then I will try and use the airmon-ng start wlp2s0 command.

sudo airmon-ng start wlp2s0  Found 2 processes that could cause trouble. If airodump-ng, aireplay-ng or airtun-ng stops working after a short period of time, you may want to run 'airmon-ng check kill'    PID Name 17176 avahi-daemon 17182 avahi-daemon  PHY Interface   Driver      Chipset  phy0    wlp2s0      wl      Broadcom Inc. and subsidiaries BCM4313 802.11bgn Wireless Network Adapter (rev 01)          (experimental wl monitor mode vif already enabled for [phy0]wlp2s0 on [phy0]prism0) 

However, my card is still not put into monitor mode.

I’ve updated my OS using

sudo apt update 

and

sudo apt upgrade 

but it still refuses to enable monitor mode.

I have been able to start monitor mode before and haven’t installed anything new or tried any other methods other than airmon-ng so I don’t know what could have changed enough to cause these issues.

I’ve also never seen this before but I don’t understand what it means and have a feeling that it’s trying to tell me what the issue is:

(experimental wl monitor mode vif already enabled for [phy0]wlp2s0 on [phy0]prism0) 

I have a Samsung Q330 running Ubuntu 18.04

Distributor ID: Ubuntu Description:    Ubuntu 18.04.3 LTS Release:    18.04 Codename:   bionic 

My network card in the laptop is

wlp2s0    IEEE 802.11  ESSID:"[REDACTED]"             Mode:Managed  Frequency:2.432 GHz  Access Point: AA:BB:CC:DD:EE:FF              Retry short limit:7   RTS thr:off   Fragment thr:off           Power Management:on  prism0    no wireless extensions.  lo        no wireless extensions.  enp6s0    no wireless extensions.  docker0   no wireless extensions. 

EDIT

Sorry, I used the wrong command for my network card

Here’s the actual card information using lshw -C network

 *-network                         description: Wireless interface        product: BCM4313 802.11bgn Wireless Network Adapter        vendor: Broadcom Inc. and subsidiaries        physical id: 0        bus info: pci@0000:02:00.0        logical name: wlp2s0        version: 01        serial: e8:39:df:26:dd:c5        width: 64 bits        clock: 33MHz        capabilities: pm msi pciexpress bus_master cap_list ethernet physical wireless        configuration: broadcast=yes driver=wl0 driverversion=6.30.223.271 (r587334) ip=172.20.8.105 latency=0 multicast=yes wireless=IEEE 802.11        resources: irq:16 memory:fc500000-fc503fff   *-network        description: Ethernet interface        product: 88E8040 PCI-E Fast Ethernet Controller        vendor: Marvell Technology Group Ltd.        physical id: 0        bus info: pci@0000:06:00.0        logical name: enp6s0        version: 00        serial: 00:24:54:ac:a3:c1        capacity: 100Mbit/s        width: 64 bits        clock: 33MHz        capabilities: pm msi pciexpress bus_master cap_list ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd autonegotiation        configuration: autonegotiation=on broadcast=yes driver=sky2 driverversion=1.30 latency=0 link=no multicast=yes port=twisted pair        resources: irq:24 memory:fc600000-fc603fff ioport:4000(size=256)   *-network        description: Ethernet interface        physical id: 4        logical name: docker0        serial: 02:42:bc:20:12:22        capabilities: ethernet physical        configuration: broadcast=yes driver=bridge driverversion=2.3 firmware=N/A ip=172.17.0.1 link=no multicast=yes