I've downloaded the extra apparmor profiles using
I enabled the chromium profile and realised it doesn't work out of the box. I've glanced over the various apparmor docs and added the following rules to /etc/apparmor.d/local/usr.bin.chromium-browser in order to get chromium to work without logging problems:
sudo aptitude install apparmor-profiles
I wasn't too sure about my execute rules, so used the same rules as xdg-open found in /etc/apparmor.d/usr.bin.chromium-browser, which was:
Can someone confirm that my additional rules are sound?
p.s. I presume the profile shipped with apparmor-profiles doesn't work out of the box because it has lagged behind work done on chromium?