** Description changed:
- Hello, I've already asked a question about this issue and user
- andrew-woodhead wrote/suggested, that I should report a bug. So, I just
- copied the contents of my questions [1], because it seems to me, that
- exactly describes the problem.
+ Hello, I've already asked a question about this issue and user andrew-
+ woodhead wrote/suggested, that I should report a bug. So, I just copied
+ the contents of my questions*, because it seems to me, that exactly
+ describes the problem.
The default Firefox profile for AppArmor (ver. 2.7.102-0ubuntu3.1
and apparmor-profiles 2.7.102-0ubuntu3.1) on *buntu 12.04 contains the
names of directories only in English. What about the other users, who
are speaking a different languages? Profile contains an interesting
policy/rule:
# Default profile allows downloads to ~/Downloads and uploads from ~/Public
owner @{HOME}/Public/ r,
owner @{HOME}/Public//* r,
owner @{HOME}/Downloads/ r,
owner @{HOME}/Downloads/* rw,
It should not be changed? Let see: if someone uses language such as
German, Italy or whatever, the default profile may not work, because the
real names of these (above) directories are different and in fact are
written in a different, non-english language. I do not know if it is a
bug, but it seems to be important from AppArmor point of view. Of
course, it also has an impact on security.
Example solutions:
- 1) update Firefox default profile during system installation and a step where
users are setting their native language (automatic update?).
- 2) when the user will try to activate Firefox profile with 'aa-enforce'
command, display a message about changing directory names for '@{HOME}/Public/'
and '@{HOME}/Downloads/' locations in the 'usr.bin.firefox' file. So, that it
will be consistent with user native language.
+ 1) update Firefox default profile during system installation and a step where
users are setting their native language (automatic update?).
+ 2) when the user will try to activate Firefox profile with 'aa-enforce'
command, display a message about changing directory names for '@{HOME}/Public/'
and '@{HOME}/Downloads/' locations in the 'usr.bin.firefox' file. So it will be
consistent with user native language.
+ 3) OPTIONAL: adding an information to the "Apparmor - Community Ubuntu
Documentation", especially FAQ subheading and question about enabling profile
for Firefox**.
Since this is about the default profile, I think that more info about
system etc. is not needed.
Best regards!
- [1] https://answers.launchpad.net/ubuntu/+question/210920
+ * https://answers.launchpad.net/ubuntu/+question/210920
+ **
https://help.ubuntu.com/community/AppArmor#How_can_I_enable_AppArmor_for_Firefox.3F
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1065538
Title:
AppArmor default profile for Firefox contains the names of directories
only in English
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1065538/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
