lp:~jdstrand/firefox/firefox-3.5-apparmor
- Get this branch:
- bzr branch lp:~jdstrand/firefox/firefox-3.5-apparmor
Branch merges
- Alexander Sack (community): Approve
- Diff: None lines
Related bugs
Bug #382917: ship opt-in enforcing apparmor profile for firefox | Wishlist | Fix Released | |
Bug #428071: Apparmor profile does not recognize plugins in .mozilla | Low | Fix Released | |
Bug #429061: Apparmor profile forbids Gnash | Medium | Fix Released |
Related blueprints
Branch information
Recent revisions
- 465. By Jamie Strandboge
-
[ Jamie Strandboge <email address hidden> ]
* debian/usr.bin. firefox- 3.5:
- allow gnash (LP: #429061)
- allow access to plugins directory (LP: #428071)
- allow access to abstractions/ubuntu- console- email,
abstractions/ubuntu- email and abstractions/ ubuntu- gnome-terminal
for mailto:. Add commented section for using xterm and konsole - 459. By Jamie Strandboge
-
generalize apparmor profile packaging:
- debian/rules:
- use .in files for firefox-3.5.postrm, firefox-3.5.preinst,
usr.bin.firefox. apparmor, README.Debian.in
- cp instead of dh_install the profile, since we need to rename
- debian/README. Debian. in: use @APPNAME@
- debian/firefox- 3.5.postinst. in: use @APPNAME@
- debian/firefox- 3.5.postrm. in: use @APPNAME@
- debian/firefox- 3.5.preinst. in: use @APPNAME@
- debian/usr.bin. firefox. apparmor. in: use @APPNAME@ debian/
apport/ firefox- 3.5.py: add apparmor info if profile is not disabled - 457. By Jamie Strandboge
-
adjust profile for sun java:
- add network inet6 stream and proc entries for ipv6
- access to @{HOME}/.java
- access to /etc/java-*-sun/**
- access to /usr/lib/jvm/java- *-sun-1. */jre/bin/ java reduce noise:
- deny write access to /usr/lib/firefox- 3.*/**, /usr/lib/ firefox- addons/ ** and
deny /usr/lib/xulrunner- addons/ ** work for new user (allow access to /bin/which)
mozplugger improvements (/etc/mozpluggerr and /usr/bin/mplayer)
adjust access to evince to be PUxr (ie use a profile if it is there, otherwise
run unconfined)
Branch metadata
- Branch format:
- Branch format 6
- Repository format:
- Bazaar pack repository format 1 (needs bzr 0.92)