[pkg-apparmor] Bug#742829: Bug#742829: Chromium browser profile not adapted to Debian packaging

Ben Bailess ben.bailess at gmail.com
Mon May 23 14:28:19 UTC 2016


Hello:

> When I used to enable to profile by using the aliases above, it would work
> just fine, but today when I tried it on a fresh sid installation, no dice.
> I get the following:
> 
> apparmor="DENIED" operation="open"
> profile="/usr/lib/chromium-browser/chromium-browser"
> name="/run/NetworkManager/resolv.conf
> 
> Which stops Chromium from loading websites...
> 
> Thanks to everyone working toward better apparmor profiles :)
> 
> Info:
> Chromium version 49.0.2623.87-1
> apparmor-profiles version 2.10-3
> 
> Ben

This behavior was actually a result of unrelated bug #813835,
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813835, in the network
manager abstraction, which has since been fixed.

The alias above works nicely for me, currently on unstable/sid. I know
we don't want to maintain significant deltas against upstream... but
would a compromise in this case be reasonable considering that it would
at least allow users to enforce the chromium profile without needing to
maintain their own deltas against what's repackaged for debian?

Best,

Ben



More information about the pkg-apparmor-team mailing list