Firefox 12's launcher script is not allowed in abstractions/ubuntu-browsers

This is fine in precise onwards as that line was change to:
  /usr/lib/firefox*/firefox*.sh Cx -> sanitized_helper,

Thank you for reporting this to Ubuntu.
That patch doesn't work as we want to allow stuff like /usr/lib/firefox-trunk and /usr/lib/firefox-aurora. I'll do something similar to what's in precise

According to http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/precise/apparmor/precise/view/head:/profiles/apparmor.d/abstractions/ubuntu-browsers this is not affecting Precise. It looks like it affects all earlier releases, from Lucid to Oneiric.

Micah, the patch would work since it only adds a rule and leave the firefox-* one. I do agree with you that firefox* is better though. Recent versions are using PUx while Lucid uses the subobtimal Ux. Would you mind to also use PUx on Lucid for people using a custom profile ?

Thanks

Simon, yes, sorry, you are correct, I'd prefer to just keep it simple though and remove the dash.

This is what I currently have in lucid:
grep firefox /etc/apparmor.d/abstractions/ubuntu-browsers
  # this should cover all firefox browsers and versions (including shiretoko
  /usr/lib/firefox-*/firefox.sh PUx,
ii apparmor 2.5.1-0ubuntu0.10.04.2 User-space parser utility for AppArmor

On 12-04-26 04:29 PM, Micah Gersten wrote:
> This is what I currently have in lucid:
> grep firefox /etc/apparmor.d/abstractions/ubuntu-browsers
> # this should cover all firefox browsers and versions (including shiretoko
> /usr/lib/firefox-*/firefox.sh PUx,
> ii apparmor 2.5.1-0ubuntu0.10.04.2 User-space parser utility for AppArmor

Right, sorry for the confusion. I was looking at
http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/lucid/apparmor/lucid/view/head:/profiles/apparmor.d/abstractions/ubuntu-browsers

I just confirmed on a Lucid system that it is effectively using PUx
which is perfect. Thanks again.

This bug was fixed in the package apparmor - 2.5.1-0ubuntu0.10.04.4

---------------
apparmor (2.5.1-0ubuntu0.10.04.4) lucid-security; urgency=low

  * fix LP: #989184 - Firefox 12's launcher script is not allowed in
    abstractions/ubuntu-browsers; This was a regression from the firefox
    path changing to a non-versioned path in the Firefox 12 packaging
    - add debian/patches/0016-lp989184.patch
    - update debian/patches/series
  * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox;
    This was a regression from the Thunderbird path changing to a non-versioned
    path in the Thunderbird 12 packaging
    - add debian/patches/0015-lp990931.patch
    - update debian/patches/series
 -- Micah Gersten <email address hidden> Wed, 30 May 2012 14:02:17 -0500

This bug was fixed in the package apparmor - 2.6.1-0ubuntu3.1

---------------
apparmor (2.6.1-0ubuntu3.1) natty-security; urgency=low

  * fix LP: #989184 - Firefox 12's launcher script is not allowed in
    abstractions/ubuntu-browsers; This was a regression from the firefox
    path changing to a non-versioned path in the Firefox 12 packaging
    - add debian/patches/0016-lp989184.patch
    - update debian/patches/series
  * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox;
    This was a regression from the Thunderbird path changing to a non-versioned
    path in the Thunderbird 12 packaging
    - add debian/patches/0015-lp990931.patch
    - update debian/patches/series
 -- Micah Gersten <email address hidden> Tue, 05 Jun 2012 01:54:14 -0500

This bug was fixed in the package apparmor - 2.7.0~beta1+bzr1774-1ubuntu2.1

---------------
apparmor (2.7.0~beta1+bzr1774-1ubuntu2.1) oneiric-security; urgency=low

  * fix LP: #989184 - Firefox 12's launcher script is not allowed in
    abstractions/ubuntu-browsers; This was a regression from the firefox
    path changing to a non-versioned path in the Firefox 12 packaging
    - add debian/patches/0016-lp989184.patch
    - update debian/patches/series
  * fix LP: #990931 - Thunderbird is being blocked by apparmor from Firefox;
    This was a regression from the Thunderbird path changing to a non-versioned
    path in the Thunderbird 12 packaging
    - add debian/patches/0015-lp990931.patch
    - update debian/patches/series
 -- Micah Gersten <email address hidden> Tue, 05 Jun 2012 02:01:04 -0500

The attachment "Allow to call /usr/lib/firefox/firefox.sh in abstractions/ubuntu-browsers" of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-reviewers team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]