Agreed we can't ask for a user to create a profile for every
application, apparmor profiles can be shared, and having a generic
profile that can be opted into makes sense. We are working towards it,
this is just the first iteration. One of the things we are working on is
abstracting what the current set needs in the way of permissions so we
can refine the profiles. Some will remain individual application
profiles some will become more generic as this evolves.

One of the things that will help is if we can move this from an esoteric
log message to a user prompt. We want to be really careful with user
prompts but once we have the main set of applications covered prompting
the user that the application requires this additional permission,
similar to how Mac's ask about whether you really want to run an
application downloaded from the internet, and doing the profile
setup/tagging in the backgound instead of having the user do it makes
this a lot more usable.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to epiphany-browser in Ubuntu.
https://bugs.launchpad.net/bugs/2046844

Title:
  AppArmor user namespace creation restrictions cause many applications
  to crash with SIGTRAP

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2046844/+subscriptions


-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to