[apparmor] [profile] Firefox: "DENIED", requested/denied_mask="r" for /proc/*/net/arp.

Seth Arnold seth.arnold at canonical.com
Fri Nov 18 19:14:52 UTC 2016


On Fri, Nov 18, 2016 at 07:47:48PM +0100, daniel curtis wrote:
> So if AppArmor DENIED /proc/2496/net/arp (requested_mask="r"
> denied_mask="r") access and according to yours words I should use such
> rule:
> 
> @{PROC}/[0-9]*/net/arp r,
> 
> Am I right? It is a sufficient rule? Can you confirm this?

Hi Daniel, this rule should be sufficient to allow firefox's new netid
feature to work.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161118/8808b547/attachment.pgp>


More information about the AppArmor mailing list