Page 1 of 4 123 ... LastLast
Results 1 to 10 of 37

Thread: Why isnt apparmor firefox profile enabled by default?

  1. #1
    Join Date
    May 2009
    Beans
    27
    Distro
    Ubuntu 9.10 Karmic Koala

    Question Why isnt apparmor firefox profile enabled by default?

    This page https://help.ubuntu.com/community/AppArmor shows how to enable apparmor firefox profile. Why isnt apparmor firefox profile enabled by default? I would postulate that this would be because there must be some limitation by having the profile enabled. If so, what would the limitation be?

  2. #2
    Join Date
    Jan 2008
    Location
    USA
    Beans
    971
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Why isnt apparmor firefox profile enabled by default?

    Quote Originally Posted by jasonmchristos View Post
    This page https://help.ubuntu.com/community/AppArmor shows how to enable apparmor firefox profile. Why isnt apparmor firefox profile enabled by default? I would postulate that this would be because there must be some limitation by having the profile enabled. If so, what would the limitation be?
    Short answer: not everyone has the same needs from Firefox, so enabling the profile by default might "break" Firefox for some people and might be too permissive for others.

  3. #3
    Join Date
    Aug 2008
    Location
    Brazil
    Beans
    12,497
    Distro
    Ubuntu Studio 12.04 Precise Pangolin

    Re: Why isnt apparmor firefox profile enabled by default?

    Quote Originally Posted by rookcifer View Post
    Short answer: not everyone has the same needs from Firefox, so enabling the profile by default might "break" Firefox for some people and might be too permissive for others.
    +1

    For instance, it might break extensions functions.

  4. #4
    Join Date
    Mar 2010
    Location
    /home
    Beans
    9,582
    Distro
    Xubuntu

    Re: Why isnt apparmor firefox profile enabled by default?

    So, here's the thing; if I enable the AppArmor profile for Firefox and things get messed up can I just disable it and everything will be back to "normal"? Secondly, I don't understand what the default profile is doing; a brief explanation about what it protects/prevents would be nice.
    Thanks in advance

  5. #5
    Join Date
    Jan 2008
    Location
    USA
    Beans
    971
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Why isnt apparmor firefox profile enabled by default?

    Quote Originally Posted by Rubi1200 View Post
    So, here's the thing; if I enable the AppArmor profile for Firefox and things get messed up can I just disable it and everything will be back to "normal"?
    Yes.

    Secondly, I don't understand what the default profile is doing; a brief explanation about what it protects/prevents would be nice.
    Thanks in advance
    There is an apparmor sticky at the top of this forum which explains a lot of this.

  6. #6
    Join Date
    Mar 2010
    Location
    /home
    Beans
    9,582
    Distro
    Xubuntu

    Re: Why isnt apparmor firefox profile enabled by default?

    Thanks!
    I will check out the sticky as well.

  7. #7
    Join Date
    Mar 2010
    Location
    /home
    Beans
    9,582
    Distro
    Xubuntu

    Re: Why isnt apparmor firefox profile enabled by default?

    Ok, so I read the sticky and understood perhaps 70-80%. If I enable the default profile am I protected in the way that AppArmor intends the system to be protected? Lastly, is there a real need to use the profile and is it considered as THE recommended approach to security in Ubuntu?

  8. #8
    Join Date
    Mar 2010
    Location
    /home
    Beans
    9,582
    Distro
    Xubuntu

    Re: Why isnt apparmor firefox profile enabled by default?

    Another question: if the default profile for Firefox that ships with 9.10 is too restrictive which of the profiles posted by bodhi.zazen would be most appropriate?
    FYI: I have no extensions installed or other addons. I use the default Firefox/Ubuntu pack that ships with the distro.
    Thanks in advance.

  9. #9
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: Why isnt apparmor firefox profile enabled by default?

    Quote Originally Posted by Rubi1200 View Post
    Another question: if the default profile for Firefox that ships with 9.10 is too restrictive which of the profiles posted by bodhi.zazen would be most appropriate?
    FYI: I have no extensions installed or other addons. I use the default Firefox/Ubuntu pack that ships with the distro.
    Thanks in advance.
    That is why it is not enabled by default =)

    If you use the default FF profile, you will be using apparmor in a generic way, ie should work for most people most of the time.

    If you do not like the default profile, either too restrictive or too loose, you will need to modify the profile yourself.

    Only you can decide what is most appropriate for you.
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

  10. #10
    Join Date
    Mar 2010
    Location
    /home
    Beans
    9,582
    Distro
    Xubuntu

    Re: Why isnt apparmor firefox profile enabled by default?

    Thanks for replying. Do you recommend using the default profile? In your AppArmor sticky you say that you want to encourage people to use AppArmor. But I am a bit confused as to whether or not I really need it.
    Thanks in advance.

Page 1 of 4 123 ... LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •