[apparmor] [profile] Firefox: "DENIED", requested/denied_mask="r" for /proc/*/net/arp.

[Christian Boltz]

Hello,

Am Samstag, 19. November 2016, 11:58:09 CET schrieb daniel curtis:
> I'm sorry for writing so many messages,  but I've done a mistake: "rw"
> access was related to /dev/nvidiactl not arp! 

Maybe you should use abstractions/nvidia instead of adding access to 
/dev/nvidiactl to the firefox profile.

If you need similar changes for other profiles, it might even be a good 
idea to include abstractions/nvidia in abstractions/X. Note that 
abstractions/nvidia is quite permissive, which is why we don't add it 
for everybody by default.

BTW: If you use aa-logprof instead of reading the log manually, it will 
make your life easier and propose matching abstractions ;-)

> I'm sorry once again - I'm so busy right now and I don't notice some
> obvious things.

No problem ;-)


Regards,

Christian Boltz
-- 
Maybe you need to turn the chamaeleon (gecko) once more, 90 grades this
time, with a silly grin and a rolling stones tongue coming out. ;-))
[Eberhard Moenkeberg in opensuse]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161120/5c3817db/attachment.pgp>