[apparmor] [profile] Firefox: "DENIED", requested/denied_mask="r" for /proc/*/net/arp.

[daniel curtis]

Hi Christian

>> Maybe you should use abstractions/nvidia instead of adding
>> access to  /dev/nvidiactl to the firefox profile.

True, maybe you're right. I'm using a default Firefox profile (with one
rule added: @{PROC}/@{pid}/net/arp r,). If it's about nvidiactl - I've
never had any problems with Firefox, because of this one. But, I seeing
this more often, after update to ver. 49. (The same thing with net/arp).

Yes: abstractions/nvidia contains rule for a nvidiactl and this
abstractions is not included in a Firefox profile. So, maybe it's a good
idea to add this...

>> If you use aa-logprof instead of reading the log manually...

Honestly; I'm doing both things ;- )

Cheers.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161122/c2940486/attachment.html>