[apparmor] [patch] fix for chromium-browser from evince, 14.04

[Jamie Strandboge]

On 05/22/2014 12:35 AM, Seth Arnold wrote:
> Ubuntu 14.04's chromium-browser has changed paths in a way that prevents
> evince from opening clicked links in chromium-browser windows.
> 
> This patch adds a new path for the chrome-sandbox executable to the
> sanitized_helper profile, so chromium will get its own tailored profile if
> necessary.
> 
> The reporter who said this patch helped included some further DENIED lines
> for signals that indicates this is probably not sufficient but did make
> the links work as expected.
> 
> https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1282314
> 
> Signed-off-by: Seth Arnold <seth.arnold at canonical.com>
> 
> === modified file 'profiles/apparmor.d/abstractions/ubuntu-helpers'
> --- profiles/apparmor.d/abstractions/ubuntu-helpers	2014-02-14 02:11:54 +0000
> +++ profiles/apparmor.d/abstractions/ubuntu-helpers	2014-05-20 21:55:05 +0000
> @@ -61,6 +61,7 @@
>    # require the santized_helper (ie, LD_PRELOAD will only use standard system
>    # paths (man ld.so)).
>    /usr/lib/chromium-browser/chromium-browser-sandbox PUxr,
> +  /usr/lib/chromium-browser/chrome-sandbox PUxr,
>    /opt/google/chrome/chrome-sandbox PUxr,
>    /opt/google/chrome/google-chrome Pixr,
>    /opt/google/chrome/chrome Pixr,
> 
> 
Acked-By: Jamie Strandboge <jamie at canonical.com>


-- 
Jamie Strandboge                 http://www.ubuntu.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140522/13945cbd/attachment.pgp>