Skip to content

Couple minor updates to the Chromium profile before cutting out lsb_release

Daniel Richard G. requested to merge iskunk/apparmor-profiles:drg-mods-1 into master

Did some testing with Chromium on Debian stable and unstable; the sandbox needed access to a few more basic libraries. With this change, the profile should be fully usable on Debian.

Also updated to use @{pid} and @{tid} properly. Sure would be nice if we had something like @{pci} to match /sys/devices/pci* entries. This profile currently uses

  /sys/devices/pci[0-9]*/

but the patched Ubuntu profile uses

  /sys/devices/pci[0-9a-f]*/

which better addresses the fact that the PCI numbers are hex, but feels like a half-solution at best.

Merge request reports