Comment 17 for bug 447006

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

SRU REQUEST (AppArmor)

1. Users of firefox on KDE are unable to use firefox with the profile enabled. The fix is 2 parts, one in apparmor and one in firefox. This SRU request is for the apparmor portion.

2. The fix is not in Lucid yet

3. The fix is to add the following to profiles/apparmor.d/abstractions/kde:
  /etc/kde4rc r,
  /usr/bin/kde4-config Ux,

4. TEST CASE:
- adjust the /etc/apparmor.d/usr.bin.firefox-3.5 file to have:
  #include <abstractions/kde>
- in KDE, use 'aa-enforce /etc/apparmor.d/usr.bin.firefox-3.5' to enable the profile
- launch firefox

5. The regression potential is very low. We only allow access to files that we didn't previously have access to.