[pkg-apparmor] Bug#858174: Please provide an AppArmor profile for Firefox

Vincas Dargis vindrg at gmail.com
Tue Oct 30 18:51:22 GMT 2018


intrigeri, what is rationale for upping it to "normal"?

Maybe you would like/expect to have it in Buster? Maybe some one plans to upstream Ubuntu profile, 
etc. :)


I would really like to have it, but looking at Thunderbird experience, we kinda lack abstractions 
for launching almost arbitrary application for downloads (as in Thunderbird attachments case), we 
don't have better alternative to using sanitized_helper (like `Px | Cx -> sanitized_helper` or 
smth.), profile will produce bunch of File Dialog-related denies too wile browsing directories, etc, 
etc.

I kinda feel if we can't make Thunderbird profile actually useful, it's kinda naive to want Firefox 
too (though I would still want it, naively :) ).



More information about the pkg-apparmor-team mailing list