Thread: apparmor profile for chromium?

hello,

i've downloaded apparmor profiles using

code:

sudo aptitude install apparmor-profiles

i enabled chromium profile , realised doesn't work out of box. i've glanced on various apparmor docs , added following rules /etc/apparmor.d/local/usr.bin.chromium-browser in order chromium work without logging problems:

code:

/sys/devices/pci*/**/* r, /sys/devices/system/cpu/**/* r, /home/phatypus/.mozilla/firefox/* r, /usr/bin/xdg-settings ixr, /usr/bin/xdg-mime ixr, /bin/which ixr, /bin/readlink ixr, /usr/bin/cut ixr, /usr/bin/basename ixr, /usr/bin/mawk ixr, /usr/bin/gconftool-2 ixr,

i wasn't sure execute rules, used same rules xdg-open found in /etc/apparmor.d/usr.bin.chromium-browser, was:

code:

/usr/bin/xdg-open ixr,

can confirm additional rules sound?


thanks.


p.s. presume profile shipped apparmor-profiles doesn't work out of box because has lagged behind work done on chromium?

/home/phatypus/ should @{home}/

otherwise decide wish allow, borwsers difficult use varies.

suggest file bug report on lp re: chromium profile.

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [ubuntu] apparmor profile for chromium?

Ubuntu