[apparmor] Accessing DMI data!?

[Jordan Glover]

On Monday, February 10, 2020 3:23 PM, mailinglisten at posteo.de <mailinglisten at posteo.de> wrote:

> hello,
>
> i just discovered, some apps desire access to DMI data, precisely to
> /sys/devices/virtual/dmi/id/
>
> In the case of audio software i can understand it may need to know on
> what hardware it runs.
>
> but a web browser? why would a webbrowser need to know the bios version
> or computer model name?
>
> the one who really benefits from such information is a possble attacker,
> thus for a web browser i would deny access to this data.
>
> what do you think?

This is intended for chromium:
https://chromium.googlesource.com/chromium/src.git/+/84618eee98fdf7548905e883e63e4f693800fcfa

Jordan