Your message dated Sat, 17 Dec 2016 15:18:48 +0000 with message-id <[email protected]> and subject line Bug#742829: fixed in apparmor 2.10.95-8 has caused the Debian Bug report #742829, regarding Chromium browser profile not adapted to Debian packaging to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 742829: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742829 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: apparmor-profiles Version: 2.7.103-4 The /etc/apparmor.d/usr.bin.chromium-browser profile appears to have been taken verbatim from Ubuntu, and unfortunately is not usable with Debian's packaging of the Chromium browser without a number of modifications (starting with a file rename): --- /etc/apparmor.d/usr.bin.chromium-browser 2014-03-27 16:16:54.000000000 -0400 +++ /etc/apparmor.d/usr.bin.chromium 2014-03-27 16:22:15.119117865 -0400 @@ -2,7 +2,7 @@ #include <tunables/global> # We need 'flags=(attach_disconnected)' in newer chromium versions -/usr/lib/chromium-browser/chromium-browser flags=(attach_disconnected) { +/usr/lib/chromium/chromium flags=(attach_disconnected) { #include <abstractions/audio> #include <abstractions/base> #include <abstractions/cups-client> @@ -63,11 +63,11 @@ @{PROC}/sys/kernel/shmmax r, owner /{dev,run}/shm/{,.}org.chromium.* mrw, - /usr/lib/chromium-browser/*.pak mr, - /usr/lib/chromium-browser/locales/* mr, + /usr/lib/chromium/*.pak mr, + /usr/lib/chromium/locales/* mr, # Noisy - deny /usr/lib/chromium-browser/** w, + deny /usr/lib/chromium/** w, # Make browsing directories work / r, @@ -108,16 +108,16 @@ owner @{HOME}/.config/chromium/**/Dictionaries/*.bdic mr, # Allow transitions to ourself and our sandbox - /usr/lib/chromium-browser/chromium-browser ix, - /usr/lib/chromium-browser/chromium-browser-sandbox cx -> chromium_browser_sandbox, + /usr/lib/chromium/chromium ix, + /usr/lib/chromium/chrome-sandbox cx -> chromium_browser_sandbox, # TODO: child profile /bin/ps Uxr, - /usr/lib/chromium-browser/xdg-settings Ux, + /usr/lib/chromium/xdg-settings Ux, /usr/bin/xdg-settings Ux, # Site-specific additions and overrides. See local/README for details. - #include <local/usr.bin.chromium-browser> + #include <local/usr.bin.chromium> profile chromium_browser_sandbox { # Be fanatical since it is setuid root and don't use an abstraction @@ -161,9 +161,9 @@ @{PROC}/[0-9]*/oom_score_adj w, @{PROC}/[0-9]*/task/[0-9]*/stat r, - /usr/bin/chromium-browser r, - /usr/lib/chromium-browser/chromium-browser Px, - /usr/lib/chromium-browser/chromium-browser-sandbox r, + /usr/bin/chromium r, + /usr/lib/chromium/chromium Px, + /usr/lib/chromium/chrome-sandbox r, owner /tmp/** rw, } Likewise, /etc/apparmor.d/local/usr.bin.chromium-browser should be renamed.
--- End Message ---
--- Begin Message ---Source: apparmor Source-Version: 2.10.95-8 We believe that the bug you reported is fixed in the latest version of apparmor, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. intrigeri <[email protected]> (supplier of updated apparmor package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Dec 2016 11:25:27 +0000 Source: apparmor Binary: apparmor apparmor-utils apparmor-profiles apparmor-docs libapparmor-dev libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor apparmor-notify python-libapparmor python3-libapparmor python-apparmor python3-apparmor dh-apparmor apparmor-easyprof Architecture: source Version: 2.10.95-8 Distribution: unstable Urgency: medium Maintainer: Debian AppArmor Team <[email protected]> Changed-By: intrigeri <[email protected]> Closes: 742829 821881 Description: apparmor-docs - documentation for AppArmor apparmor-easyprof - AppArmor easyprof profiling tool apparmor-notify - AppArmor notification system apparmor-profiles - profiles for AppArmor Security policies apparmor - user-space parser utility for AppArmor apparmor-utils - utilities for controlling AppArmor dh-apparmor - AppArmor debhelper routines libapache2-mod-apparmor - changehat AppArmor library as an Apache module libapparmor1 - changehat AppArmor library libapparmor-dev - AppArmor development libraries and header files libapparmor-perl - AppArmor library Perl bindings libpam-apparmor - changehat AppArmor library as a PAM module python3-apparmor - AppArmor Python3 utility library python3-libapparmor - AppArmor library Python3 bindings python-apparmor - AppArmor Python utility library python-libapparmor - AppArmor library Python bindings Changes: apparmor (2.10.95-8) unstable; urgency=medium . * Stop applying add-chromium-browser.patch: it's been broken for years on Debian, and nobody ever bothered to upstream this profile in a way that makes it work cross-distro (Closes: #742829). * r3441-sshd-blacklist.patch: new patch, cherry-picked from upstream (Closes: #821881). * r3497-add-ld.so.preload-to-abstractions-base.patch: new patch, cherry-picked from upstream. * r3600-usrmerge.patch: new patch, cherry-picked from upstream (resolves the parts of #843461 that can be handled in this package). Checksums-Sha1: beece68558f314982006200590280e8bd918d607 3208 apparmor_2.10.95-8.dsc 25bdfcf13b8240e5bae6b988fc3f7daaceeb3164 107100 apparmor_2.10.95-8.debian.tar.xz Checksums-Sha256: 4e8bd686c18c3b58a0ebbae11fe18d77aa7f01afb66f749d25ba943eb0a9408d 3208 apparmor_2.10.95-8.dsc 8dd6536a58105614039536484899da28514a8e9c81e0d2c56444001b119c2d4a 107100 apparmor_2.10.95-8.debian.tar.xz Files: b1160741fa941faf1b5a5ad4cad9944f 3208 admin extra apparmor_2.10.95-8.dsc 45240de7efd2f8d99a9e9e70f67b2c1e 107100 admin extra apparmor_2.10.95-8.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5UP557t8LGTy13pc7G2Dvyn8Ko4FAlhVQ1AACgkQ7G2Dvyn8 Ko5e5BAAjWxSs/qpq8hhaCZ0GXm+7jilNfbj+cLBaOP7E7fOTBO9fXFQFTiVfgQx TZPWmNXxKGFLHg4Pc0SxQtRd+9NDOA/JFrSkdI6EItqnLBHeDuXN+KTVYGAOd6Py BDYqq7V7Tp2IH+ajntav2MeY+cy0s33I/avgSmrr9eRjfRCcOBvBj96O7BUDdIW+ DvvqfwRCEaYs3UcuVmpxakLzLfSIQ9ErVOgSWLepKNNCdSqCnUfCXikfq/aRDWSY 2mEI7HweAkEE9dG8IT45pmaOahO5yYV/Mn/eu8WMi0Niw+3Y3/POzSKZWN0sQ4v0 vXGrAantERMP15Kz3Bt+T0voyeT9T5aGncqrg0cWV1HanO5iTvOsFIFojhfqZOsz iLI6c6yGpfs9vRMRbFzOEOOAhWCeH81pnoZdPfghkUmGZUXR9exksgfEqgM9dQaF OZGqbkpS/l9bYTg3cDKvWOQX5B8q2AkVl3SLLWUD7WHjHZAtZXc/ka1sLvm07D/W rR6rg0a1f1yO/pcj9alSfGuqurKRy3oQ1poZrBrvRlhRgftanL5xjJKaofvzOUbc lBQW01BuJyr3mk6aLLHZecENcJGENV6xP9S5LXQ07ynacjNZdGjsAU7+pu5rjQ8X bbQquBRJCDr1ijEwhWwFw0kz5W4FCEwV1EBYPVJ7Ld7EHMf7rso= =ywd7 -----END PGP SIGNATURE-----
--- End Message ---
