The following works for me so far: diff --git a/apparmor.d/usr.bin.chromium-browser b/apparmor.d/usr.bin.chromium-browser index c032691..976ac2f 100644 --- a/apparmor.d/usr.bin.chromium-browser +++ b/apparmor.d/usr.bin.chromium-browser @@ -1,6 +1,12 @@ # Author: Jamie Strandboge <[email protected]> #include <tunables/global>
+alias /etc/chromium-browser/ -> /etc/chromium/,
+alias /usr/bin/chromium-browser -> /usr/bin/chromium,
+alias /usr/lib/chromium-browser/chromium-browser-sandbox ->
/usr/lib/chromium/chrome-sandbox,
+alias /usr/lib/chromium-browser/chromium-browser -> /usr/lib/chromium/chromium,
+alias /usr/lib/chromium-browser/ -> /usr/lib/chromium/,
+
# We need 'flags=(attach_disconnected)' in newer chromium versions
/usr/lib/chromium-browser/chromium-browser
flags=(complain,attach_disconnected) {
#include <abstractions/audio>
I would strongly recommend deploying this solution instead of struggling
to find the perfect one, considering how critical apparmor is for this
specific application...
A.
--
Antoine Beaupré +++ Réseau Koumbit Networks +++ +1.514.387.6262 #208
--------------------------------------------------------------------
pgpvJyYax9Ry0.pgp
Description: PGP signature
