[apparmor] [Merge] lp:~intrigeri/apparmor/add-firefox-esr-to-ubuntu-browsers into lp:apparmor

intrigeri intrigeri at boum.org
Fri Jun 24 15:39:17 UTC 2016


Hi,

Steve Beattie wrote (23 Jun 2016 21:34:46 GMT):
> The problem with this is that firefox*{,.sh} is equivalent to firefox*.

Right (and since Christian noted this I've already changed the line to
firefox*).

> Furthermore it matches the firefox binary /usr/lib/firefox/firefox as
> shipped in ubuntu, which the original pattern did not.

> But (and this is what prevented me from replying when the original merge
> request was proposed), I'm not sure what the implications of that change
> are, if any. The shipped firefox profile in ubuntu (16.04 LTS at least)
> has "/usr/lib/firefox/firefox{,*[^s][^h]}" as it's profile match, so
> potentially this could cause interference.

OK. Let's avoid diving into this, if possible.

> Is there a more tightly bound pattern for the esr firefoxes that debian
> is shipping?

Yes, done in my updated branch :)

-- 
https://code.launchpad.net/~intrigeri/apparmor/add-firefox-esr-to-ubuntu-browsers/+merge/292725
Your team AppArmor Developers is requested to review the proposed merge of lp:~intrigeri/apparmor/add-firefox-esr-to-ubuntu-browsers into lp:apparmor.



More information about the AppArmor mailing list