[ubuntu-hardened] AppArmor profile for a plugin-container process.

[Daniel Curtis]

Hello Seth,

Okay, I will try to add a rule mentioned by you to a Firefox
profile. I mean this one: '/usr/lib/firefox/plugin-container Px,'.

I'm using a default Firefox profile shipped with Xubuntu 12.04,
but there is something, that makes me feel amazed. Sorry for a
little off-topic, but it's related with Firefox and AppArmor
profile.

Today, Firefox update (to a new 26. version) was available.
During update process via 'update-manager' and a moment of
'Setting up firefox...', there appeared a question about config
file from '/etc/apparmor.d/' directory ('usr.bin.firefox' file).
It looked this way:

Configuration file `/etc/apparmor.d/usr.bin.firefox'
==> Modified (by you or by a script) since installation.
==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version
      D     : show the differences between the versions
      Z     : start a shell to examine the situation
 The default action is to keep your current version.
*** usr.bin.firefox (Y/I/N/O/D/Z) [default=N] ? y
Installing new version of config file /etc/apparmor.d/usr.bin.firefox
Installing new version of config file /etc/apport/blacklist.d/firefox

'update-manager' asked me about the source of a file (Firefox
profile?) and suggested that I should choose 'change' option if
I'm not sure. Honestly, I don't know what to do in a similar
situations.

I hope, that everything is fine. Also 'aa-status' command shows,
that everything is okay.

Best regards.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-hardened/attachments/20131211/37ec4135/attachment.html>