Attached is a patch to fix the apparmor syslog noise I see after
upgrading to trusty. It follows the chromium apparmor profile in
terms of what to allow and deny.
--- ./usr.bin.firefox 2014-03-05 13:52:13.470886569 +0000
+++ /etc/apparmor.d/usr.bin.firefox 2014-03-05 13:56:42.640802391 +0000
@@ -38,7 +38,9 @@
/etc/ r,
/etc/mime.types r,
/etc/mailcap r,
+ /etc/udev/udev.conf r,
/etc/xdg/*buntu/applications/defaults.list r, # for all derivatives
+ /sys/devices/pci[0-9]*/**/uevent r,
/usr/share/xubuntu/applications/defaults.list r,
owner @{HOME}/.local/share/applications/defaults.list r,
owner @{HOME}/.local/share/applications/mimeapps.list r,
@@ -73,6 +75,9 @@
# TODO: investigate
deny /usr/bin/gconftool-2 x,
+ # This is requested, but doesn't seem to actually be needed so deny for now
+ deny /run/udev/data/** r,
+
# These are needed when a new user starts firefox and firefox.sh is used
@{MOZ_LIBDIR}/** ixr,
/usr/bin/basename ixr,
The attachment "Firefox apparmor profile updates for Trusty" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]