Bug#1098869: apparmor: triggers a security warning in Firefox with firejail

2025-03-04 Thread Vincent Lefevre
Control: forwarded -1 https://github.com/netblue30/firejail/issues/6675 On 2025-03-04 09:25:26 +0100, intrigeri wrote: > Perfect, thanks. So I'm reassigning this bug to firejail, where this > update needs to be applied. I'm not tagging this "patch" because > I don't know what problem this profile

Bug#1098869: apparmor: triggers a security warning in Firefox with firejail

2025-03-04 Thread intrigeri
Control: reassign -1 firejail Control: retitle -1 firejail-default AppArmor profile needs userns rule Hi, Vincent Lefevre (2025-03-03): > On 2025-03-03 12:03:22 +0100, intrigeri wrote: >> Can you try adding the "userns," line to the firejail-default AppArmor >> profile and see if you can reproduc

Bug#1098869: apparmor: triggers a security warning in Firefox with firejail

2025-03-03 Thread Vincent Lefevre
Hi, On 2025-03-03 12:03:22 +0100, intrigeri wrote: > Vincent Lefevre (2025-02-25): > > I suspect that this is because the firejail-default AppArmor profile > > does not use "userns" (contrary to the firefox AppArmor profile, > > which completely changed). > > I thought "userns" was a no-op on mai

Bug#1098869: apparmor: triggers a security warning in Firefox with firejail

2025-03-03 Thread intrigeri
Control: tag -1 + moreinfo Hi, Vincent Lefevre (2025-02-25): >> This actually occurs only with firejail (I actually use a wrapper >> doing that), e.g. >> >> firejail /usr/bin/firefox >> >> According to "ps -efZ", it is the firejail-default AppArmor profile >> that is used. Good to know! I ha

Bug#1098869: apparmor: triggers a security warning in Firefox with firejail

2025-02-25 Thread Vincent Lefevre
Control: affects -1 firejail ... in case something needs to be done on the firejail side. On 2025-02-25 13:59:04 +0100, Vincent Lefevre wrote: > On 2025-02-25 12:18:53 +0100, Vincent Lefevre wrote: > > After the apparmor upgrade to 4.1.0~beta5-2, Firefox > > (Debian's package firefox 135.0.1-1) n