[ubuntu-hardened] AppArmor profile for a plugin-container process.

[Seth Arnold]

Hello Daniel,

On Fri, Dec 13, 2013 at 01:56:02AM +0100, Daniel Curtis wrote:
> I'll have some more time on weekend, to check your advice.
> Even if I would like to do it now - I can not, because of no free
> time. But I'll do it, for sure.

Cool, I'd like it to work well for you.

> Yes you're right - this is unfortunate, but on the other hand it's
> working, right? If it is about 'local/usr.bin.firefox', already
> mentioned by you: it seems there is already such entry in a
> Firefox profile. So I don't need to add anything.
> 
> Generally;
> 
> * add '/usr/lib/firefox/plugin-container Px' to a Firefox profile
> * remove the line from 'usr.bin.firefox file ('/etc/apparmor.d'/)
> * reload policy
> 
> and that's all. I hope, that I've understand everything.

That's it -- note the first bullet point is about the
/etc/apparmor.d/local/usr.bin.firefox file -- I think you've got it,
but wanted to be explicit. :)

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20131212/ef20add5/attachment.pgp>