touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #53367
[Bug 1419294] Re: Apparmor chromium profile denies loading policies
The attachment "patch.diff" seems to be a patch. If it isn't, please
remove the "patch" flag from the attachment, remove the "patch" tag, and
if you are a member of the ~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]
** Tags added: patch
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1419294
Title:
Apparmor chromium profile denies loading policies
Status in apparmor package in Ubuntu:
New
Bug description:
Profiles in /etc/chromium-browser/policies/managed or /etc/chromium-
browser/policies/recommended are ignored when using the apparmor
profile.
Syslog excerpt:
Feb 7 17:10:11 ubuntu kernel: [23893.781721] audit: type=1400
audit(1423325411.004:109): apparmor="DENIED" operation="open"
profile="/usr/lib/chromium-browser/chromium-browser" name="/etc
/chromium-browser/policies/managed/policy.json" pid=16928
comm="Chrome_FileThre" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0
How to test:
Create a file policy.json in /etc/chromium-browser/policies/managed
containing:
{
"RestoreOnStartup": 1
}
start the browser and type in "about:policy". Normally you should see
the policy being listed there, which is currently not the case because
apparmor denies the reading the policy file.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1419294/+subscriptions
References