[apparmor] [PATCH] include IceWeasel in FireFox abstraction

Jamie Strandboge jamie at canonical.com
Wed Apr 25 12:21:26 UTC 2012


On Tue, 2012-04-24 at 17:01 -0700, Kees Cook wrote:
> Include IceWeasel in FireFox abstraction.
> 
> Author: Intrigeri <intrigeri at debian.org>
> Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661176
> 
> Signed-off-by: Kees Cook <kees at ubuntu.com>
> 
> Index: apparmor-debian/profiles/apparmor.d/abstractions/ubuntu-browsers
> ===================================================================
> --- apparmor-debian.orig/profiles/apparmor.d/abstractions/ubuntu-browsers	2012-04-24 11:03:46.506994000 -0700
> +++ apparmor-debian/profiles/apparmor.d/abstractions/ubuntu-browsers	2012-04-24 13:01:22.499517948 -0700
> @@ -29,8 +29,8 @@
>  
>    # this should cover all firefox browsers and versions (including shiretoko
>    # and abrowser)
> -  /usr/bin/firefox Cxr -> sanitized_helper,
> -  /usr/lib/firefox*/firefox*.sh Cx -> sanitized_helper,
> +  /usr/bin/{firefox,iceweasel} Cxr -> sanitized_helper,
> +  /usr/lib/{firefox*,iceweasel}/{firefox*.sh,iceweasel} Cx -> sanitized_helper,
>  
>    # some unpackaged, but popular browsers
>    /usr/lib/icecat-*/icecat Cx -> sanitized_helper,
> 

Hmmm, there is a namespace issue here. We are fixing a Debian bug in an
Ubuntu abstraction for a package that is not available on Ubuntu. I
understand why this was done, and I see icecat is in the context. ISTR
there being some repo that Ubuntu users could get icecat.... So I guess
I just wanted to bring up the point that Debian may want to consider
their own namespace. I would prefer if this was not mixed in with the
official Ubuntu browser though. Can you separate it out like with
icecat? Once that is done:

Acked-By: Jamie Strandboge <jamie at canonical.com>

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120425/0eac123e/attachment.pgp>


More information about the AppArmor mailing list