Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #814086

Bug#858174: Please provide an AppArmor profile for Firefox

Show all headers | View raw

Package: firefox
Severity: normal

Hi,

as you might know, AppArmor confines programs according to a set of
rules that specify what files a given program can access. This approach
helps protect the system against both known and unknown vulnerabilities.
In several distributions such as Ubuntu or Tails, AppArmor is enabled by
default.

I've not been able to find such a profile in the current Firefox package.

There is an AppArmor profile for Firefox available upstream:
https://bazaar.launchpad.net/~ubuntu-branches/ubuntu/vivid/firefox/vivid/view/head:/debian/usr.bin.firefox.apparmor.10.04
(this is the upstream profile which has been integrated into Ubuntu's
packaging of Firefox).

This profile is only active if people have installed AppArmor in first
case, so it should never break the package for users without AppArmor.

The profile can be included in your packaging quite easily.
All the necessary steps are documented here:
https://wiki.debian.org/AppArmor/Contribute/FirstTimeProfileImport

Please also see examples in the packages torbrowser-launcher or in
Icedove
(https://anonscm.debian.org/cgit/pkg-mozilla/icedove.git/tree/debian).

Please let me know if you need help.

Cheers!
ulrike

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#858174: Please provide an AppArmor profile for Firefox Ulrike Uhlig <ulrike@debian.org> - 2017-03-19 12:50 +0100
  Bug#858174: Please provide an AppArmor profile for Firefox Mike Hommey <mh@glandium.org> - 2017-03-20 00:20 +0100
    Bug#858174: Please provide an AppArmor profile for Firefox Ulrike Uhlig <ulrike@debian.org> - 2017-03-20 09:00 +0100
      Bug#858174: Please provide an AppArmor profile for Firefox intrigeri <intrigeri@debian.org> - 2017-03-20 10:30 +0100
        Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox Vincas Dargis <vindrg@gmail.com> - 2017-04-03 20:00 +0200
          Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox intrigeri <intrigeri@boum.org> - 2017-04-04 07:40 +0200
            Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox Vincas Dargis <vindrg@gmail.com> - 2017-04-04 18:50 +0200
              Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox intrigeri <intrigeri@debian.org> - 2017-04-05 08:20 +0200
                Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox Vincas Dargis <vindrg@gmail.com> - 2017-04-05 18:40 +0200

csiph-web