apparmor-easyprof-ubuntu

Merge lp:~osomon/apparmor-easyprof-ubuntu/webview-allow-dev-shm into lp:apparmor-easyprof-ubuntu

  1. webview-allow-dev-shm
  2. Merge into trunk
Proposed by Olivier Tilloy
Status: Needs review
Proposed branch: lp:~osomon/apparmor-easyprof-ubuntu/webview-allow-dev-shm
Merge into: lp:apparmor-easyprof-ubuntu
Diff against target: 25 lines (+4/-4)
1 file modified
data/policygroups/ubuntu/1.1/webview (+4/-4)
To merge this branch: bzr merge lp:~osomon/apparmor-easyprof-ubuntu/webview-allow-dev-shm
Reviewer Review Type Date Requested Status
Jamie Strandboge (community) Needs Fixing
Review via email: mp+275188@code.launchpad.net

Commit message

Also allow read/write access to /dev/shm/.org.chromium.Chromium.*.
On phones, /dev/shm is linked to /run/shm, and vice-versa on desktop.

To post a comment you must log in.
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

We don't want to do this in the existing policy because that would trigger a recompile of all webapps. We should add this to the 16.04 policy though, which aligns with Ubuntu Personal.

review: Needs Fixing
Reply

Unmerged revisions

39. By Olivier Tilloy

Also allow read/write access to /dev/shm/.org.chromium.Chromium.*.
On phones, /dev/shm is linked to /run/shm, and vice-versa on desktop.

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1=== modified file 'data/policygroups/ubuntu/1.1/webview'
2--- data/policygroups/ubuntu/1.1/webview 2015-02-26 14:48:25 +0000
3+++ data/policygroups/ubuntu/1.1/webview 2015-10-21 13:38:11 +0000
4@@ -73,8 +73,8 @@
5 /tmp/ r,
6 /var/tmp/ r,
7
8- # LP: #1260103
9- owner /run/shm/.org.chromium.Chromium.* rwk,
10+ # LP: #1260103, #1508054
11+ owner /{dev,run}/shm/.org.chromium.Chromium.* rwk,
12
13 # LP: #1260090 - when this bug is fixed, oxide_renderer can become a
14 # child profile of this profile, then we can use Cx here and Px in
15@@ -155,8 +155,8 @@
16 owner @{HOME}/.local/share/@{APP_PKGNAME}/ rw,
17 owner @{HOME}/.local/share/@{APP_PKGNAME}/** mrwkl,
18
19- # LP: #1260103
20- /run/shm/.org.chromium.Chromium.* rwk,
21+ # LP: #1260103, #1508054
22+ /{dev,run}/shm/.org.chromium.Chromium.* rwk,
23
24 # LP: #1260048
25 owner @{HOME}/.pki/nssdb/ rw,

Subscribers

People subscribed via source and target branches