FYI this is the fix for chrome (attached patch), but maybe I should
report to a separate bug as it covers more than TB...

I haven't looked at the gpg issue and apparmor configuration but it may
too be best fixed at a global level... Unless we only want to allow
specific applications to run gpg?

The fix is inspired from https://askubuntu.com/q/1357638/628778

--
Thomas
--- a/etc/apparmor.d/abstractions/ubuntu-helpers	2021-04-03 02:09:19.000000000 -0400
+++ b/etc/apparmor.d/abstractions/ubuntu-helpers	2021-11-24 00:55:23.649143462 -0500
@@ -70,6 +70,7 @@
   /opt/google/chrome{,-beta,-unstable}/chrome-sandbox PUxr,
   /opt/google/chrome{,-beta,-unstable}/google-chrome Pixr,
   /opt/google/chrome{,-beta,-unstable}/chrome Pixr,
+  /opt/google/chrome{,-beta,-unstable}/{,chrome_}crashpad_handler Pixr,
   /opt/google/chrome{,-beta,-unstable}/{,**/}lib*.so{,.*} m,
 
   # Full access

Reply via email to