Results 1 to 3 of 3

Thread: Apparmor and Firefox

  1. #1
    Join Date
    Jun 2012
    Beans
    287

    Apparmor and Firefox

    As I understand,Ubuntu is possibly the only distro coming with a preconfigured Apparmor profile for Firefox:as I'm willing to learn how Apparmor works,I've tried to enable the usr.bin.firefox profile inside /etc/apparmor.d in complain mode,and I can see from the system logs that it is working.
    But,upon restarting the system,the profile is disabled again:is this how it works?
    Is there any way to set it permanently in complain mode (maybe a script in /etc/rc.local would do?),and,furthermore,has anyone enforced the profile and observed any adverse effect?

    Also,I've seen two other profiles,namely usr.lib.firefox.firefox and usr.lib.firefox.firefox.sh in /usr/share/doc/apparmor-profiles/extras,how do you use them?

  2. #2
    Join Date
    Sep 2010
    Beans
    898

    Re: Apparmor and Firefox

    Once you enable a profile, it should remain enabled.

    Did you delete /etc/apparmor.d/disable/usr.bin.firefox ?

    If so, does that file (symbolic link) get recreated when you boot?
    Last edited by Dave_L; February 4th, 2014 at 03:22 PM.

  3. #3
    Join Date
    Jun 2012
    Beans
    287

    Re: Apparmor and Firefox

    Frankly,I forgot about deleting that link:for the time being,I've put something in rc.local and it apparently works-however,I suppose the proper way to do it would be deleting the link.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •