[apparmor] lightdm profile from a apparmor.d/abstractions directory.

[Seth Arnold]

On Mon, Aug 05, 2013 at 08:19:21PM +0200, Daniel Curtis wrote:
> So everything is fine with lightdm-guest-session and it is
> normal that it contains only a few lines? I do not have to
> change anything? Guest account is still well protected by
> AppArmor? Sorry, I had doubts when it comes to the guest
> account protection etc.

Yes, it is normal for the main body of the profile to contain only
a few lines, so long as it does #include <abstractions/lightdm> and
#include <abstractions/lightdm_chromium-browser>.

> One more thing mr Jamie. Do You think, that Firefox default
> profile shipped with *ubuntu 12.04 LTS is appropriate for
> the 22.0 and 17.0.y ESR version? I'm asking, because I think
> that in Firefox, could have been a lot of changes etc, (I mean
> updates/code changes etc. from 3.y to e.g. 22 version).

The Firefox profile shipped with 12.04 LTS should be a reasonable
starting point for any recent version of Firefox.

It would make sense to read and understand the profile before you use
it for a different use -- we wanted to ship a profile that provided an
actual improvement in security, but still allow people to use Firefox
more or less without knowing that AppArmor was there.

You might be willing to trade convience for a tighter profile in your
environment. You might even need to, depending upon the goals you're
trying to achieve.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130805/19fbd4e8/attachment.pgp>