On 01/08/2013 08:34 AM, Aaron Lewis wrote:
> Hi Jamie,
>
> On 08:27 Tue 08 Jan , Jamie Strandboge wrote:
>> On 01/08/2013 08:09 AM, Aaron Lewis wrote:
>>> Hi,
>>>
>>> I don't know why, while creating profile for chromium,
>>>
>>> /usr/lib/chromium/extensions/ c,
>>>
>>> aa-parser just complains
>>>
>> 'c'reate is currently not supported by the userspace tools, even though
>> the kernel recognizes it as different. Use 'w' which implies 'c' instead.
>
> Thanks, I substituted it, but that DENIED message doesn't appear again
> for this moment, so I can't test it at this moment ;-P
>
> /usr/lib/chromium/extensions/ doesn't exist, would it work as well?
>
> Hopefully I don't have to enable write permission for
> /usr/lib/chromium/{**,}
>
> Wha ya think?
> Sometimes an application will ask for write permissions to something like this even though it doesn't need it to run. An explicit deny rule will suppress the log message: deny /usr/lib/chromium/extensions/ w, Another option is something like this: /usr/lib/chromium/ r, /usr/lib/chromium/** r, deny /usr/lib/chromium/** w, -- Jamie Strandboge http://www.ubuntu.com/
signature.asc
Description: OpenPGP digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
