[pkg-apparmor] Bug#746418: Fixed?

intrigeri intrigeri at debian.org
Thu Jan 29 11:07:19 UTC 2015


Francois Marier wrote (26 Jan 2015 23:54:39 GMT) :
> If I look at the /etc/apparmor.d/abstractions/ubuntu-browsers file on my Sid
> machine, it looks like this is fixed:
> [...]
> Or perhaps I've misunderstood what this bug is about?

I think you did misunderstood:

* This bug is about confining Iceweasel properly under its
  own profile.
* These lines in abstractions/ubuntu-browsers are about very vaguely
  confining Firefox/Iceweasel with the (broadly open)
  sanitized_helper, when it's started from e.g. Evince or Pidgin.

The latter indeed is properly addressed in Debian these days AFAIK,
as you point out. The former is not, hence this bug report.

Hoping to have clarified :)



More information about the pkg-apparmor-team mailing list