The new firefox profile has moved all but 3 Ux out into the apparmor ubuntu-browsers.d abstractions. The sanitizied_helper workaround has been applied to those abstractions already, and the 3 Ux's in the firefox profile are simple utilities (ps, uname and mkfifo). Since they are ELF binaries, they will benefit from glibc's secure execute and can't be used to fork off children, so I am going to mark the firefox task as 'Invalid'.
** Changed in: firefox (Ubuntu Precise) Status: In Progress => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/851986 Title: use of Ux in ubuntu-* abstractions and profiles is too lenient and should be improved To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/851986/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs