[Pkg-chromium-maint] Bug#877391: Please add apparmor profile

[Guido Günther]

Package: chromium
Version: 61.0.3163.100-2
Severity: wishlist
Tags: patch

Hi,
I'd be great if Debian would ship an apparmor profile for chromium. The
attached profile was mostly prepared by Daniel Richard and is based on
the one in Ubuntu so I assume it has seen quiet some exposure to real
world usage. It works here nicely here. I'm sure there will be tweaks
needed over time so feel free to cc' me and Richard on apparmor related
issues. If this shouldn't work out we can always disable it again.

Cheers,
 -- Guido

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'stable-updates'), (500, 'oldoldstable'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages chromium depends on:
ii  chromium-common      61.0.3163.100-2
ii  libasound2           1.1.3-5
ii  libatk1.0-0          2.26.0-2
ii  libavcodec57         7:3.3.4-1
ii  libavformat57        7:3.3.4-1
ii  libavutil55          7:3.3.4-1
ii  libc6                2.24-17
ii  libcairo2            1.14.10-1
ii  libcups2             2.2.4-7
ii  libdbus-1-3          1.11.16+really1.10.22-1
ii  libevent-2.1-6       2.1.8-stable-4
ii  libexpat1            2.2.3-1
ii  libflac8             1.3.2-1
ii  libfontconfig1       2.12.3-0.2
ii  libfreetype6         2.8-0.2
ii  libgcc1              1:7.2.0-5
ii  libgdk-pixbuf2.0-0   2.36.5-2
ii  libglib2.0-0         2.54.0-1
ii  libgtk2.0-0          2.24.31-2
ii  libharfbuzz0b        1.4.2-1
ii  libicu57             57.1-6
ii  libjpeg62-turbo      1:1.5.2-2
ii  liblcms2-2           2.8-4
ii  libminizip1          1.1-8+b1
ii  libnspr4             2:4.16-1
ii  libnss3              2:3.32-2
ii  libopus0             1.2~alpha2-1
ii  libpango-1.0-0       1.40.12-1
ii  libpangocairo-1.0-0  1.40.12-1
ii  libpng16-16          1.6.32-1
ii  libpulse0            11.0-2
ii  libre2-3             20170101+dfsg-1
ii  libsnappy1v5         1.1.7-1
ii  libstdc++6           7.2.0-5
ii  libvpx4              1.6.1-3
ii  libwebp6             0.6.0-3
ii  libwebpdemux2        0.6.0-3
ii  libwebpmux3          0.6.0-3
ii  libx11-6             2:1.6.4-3
ii  libx11-xcb1          2:1.6.4-3
ii  libxcb1              1.12-1
ii  libxcomposite1       1:0.4.4-2
ii  libxcursor1          1:1.1.14-3
ii  libxdamage1          1:1.1.4-3
ii  libxext6             2:1.3.3-1+b2
ii  libxfixes3           1:5.0.3-1
ii  libxi6               2:1.7.9-1
ii  libxml2              2.9.4+dfsg1-4
ii  libxrandr2           2:1.5.1-1
ii  libxrender1          1:0.9.10-1
ii  libxslt1.1           1.1.29-2.1
ii  libxss1              1:1.2.2-1+b2
ii  libxtst6             2:1.2.3-1
ii  zlib1g               1:1.2.8.dfsg-5

Versions of packages chromium recommends:
ii  fonts-liberation  1:1.07.4-2

Versions of packages chromium suggests:
ii  chromium-driver    61.0.3163.100-2
pn  chromium-l10n      <none>
pn  chromium-shell     <none>
pn  chromium-widevine  <none>

-- Configuration Files:
/etc/apparmor.d/usr.bin.chromium changed [not included]

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-apparmor-profile.patch
Type: text/x-diff
Size: 12044 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-chromium-maint/attachments/20171001/cf5f42dd/attachment.patch>