Re: [apparmor] Accessing DMI data!?

2020-02-11 Thread Mikhail Morfikov
On 11/02/2020 16:36, mailinglis...@posteo.de wrote: > What I recently do is to create a copy of a program and then have 2 > profiles, one very tight and the other a bit more flexibel, e.g. I have > /usr/bin/vlc and /usr/bin/vlc-secure both exactly the same, but with > different name that allows

Re: [apparmor] Accessing DMI data!?

2020-02-11 Thread mailinglis...@posteo.de
10.02.20 18:49: > On 2/10/20 7:23 AM, mailinglis...@posteo.de wrote: >> hello, >> >> i just discovered, some apps desire access to DMI data, precisely to >> /sys/devices/virtual/dmi/id/ >> (...) > Generally speaking the web browser doesn't need access to it. You can deny > access to it and the

Re: [apparmor] Accessing DMI data!?

2020-02-10 Thread John Johansen
On 2/10/20 7:23 AM, mailinglis...@posteo.de wrote: hello, i just discovered, some apps desire access to DMI data, precisely to /sys/devices/virtual/dmi/id/ In the case of audio software i can understand it may need to know on what hardware it runs. but a web browser? why would a webbrowser

Re: [apparmor] Accessing DMI data!?

2020-02-10 Thread Jordan Glover
On Monday, February 10, 2020 3:23 PM, mailinglis...@posteo.de wrote: > hello, > > i just discovered, some apps desire access to DMI data, precisely to > /sys/devices/virtual/dmi/id/ > > In the case of audio software i can understand it may need to know on > what hardware it runs. > > but a web