Re: [apparmor] [profile: plugin-container] the dbus machine-id: deny or allow 'r'?

2016-02-26 Thread Simon McVittie
On 25/02/16 17:18, daniel curtis wrote: > Anyway, there is a one thing which wonders me: > '/var/lib/dbus/machine-id'. According to the DENIED messages in a log > files, there is something like this: > > name="/var/lib/dbus/machine-id", denied mask 'r' The systemd machine ID (always

[apparmor] [profile: plugin-container] the dbus machine-id: deny or allow 'r'?

2016-02-25 Thread daniel curtis
Hello. Some time ago, I've decided to create a profile for the 'plugin-container' process to make a Firefox web browser even more secure. Everything seems to work okay. I've managed to "solve" the DENIED messages/entries from a system log files, such as e.g. '/var/log/kern.log' etc. Anyway,