apparmor="ALLOWED" operation="open" parent=22477 profile="/usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox" name="/usr/lib/i386-linux-gnu/libstdc++.so.6.0.18" pid=14545 comm="chromium-browse" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
apparmor="ALLOWED" operation="file_mmap" parent=22477 profile="/usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox" name="/usr/lib/i386-linux-gnu/libstdc++.so.6.0.18" pid=14545 comm="chromium-browse" requested_mask="mr" denied_mask="mr" fsuid=0 ouid=0
apparmor="ALLOWED" operation="open" parent=22477 profile="/usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox" name="/lib/i386-linux-gnu/libgcc_s.so.1" pid=14545 comm="chromium-browse" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
apparmor="ALLOWED" operation="file_mmap" parent=22477 profile="/usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox" name="/lib/i386-linux-gnu/libgcc_s.so.1" pid=14545 comm="chromium-browse" requested_mask="mr" denied_mask="mr" fsuid=0 ouid=0
Less important:
apparmor="ALLOWED" operation="exec" ##### profile="/usr/lib/chromium-browser/chromium-browser" name="/usr/bin/lsb_release" @@@@ comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="/usr/lib/chromium-browser/chromium-browser//null-16"
apparmor="ALLOWED" operation="getattr" ##### profile="/usr/lib/chromium-browser/chromium-browser//null-16" name="/etc/ld.so.cache" @@@@ comm="lsb_release" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="getattr" ##### profile="/usr/lib/chromium-browser/chromium-browser//null-16" name="/usr/lib/chromium-browser/" @@@@ comm="lsb_release" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="getattr" ##### profile="/usr/lib/chromium-browser/chromium-browser//null-16" name="/usr/lib/chromium-browser/libs/" @@@@ comm="lsb_release" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="open" ##### profile="/usr/lib/chromium-browser/chromium-browser" name="/sys/devices/system/cpu/cpu0/topology/core_id" @@@@ comm="GoogleTalkPlugi" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="open" ##### profile="/usr/lib/chromium-browser/chromium-browser" name="/sys/devices/system/cpu/cpu1/topology/core_id" @@@@ comm="GoogleTalkPlugi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="open" ##### profile="/usr/lib/chromium-browser/chromium-browser" name="/sys/devices/system/cpu/cpu2/topology/core_id" @@@@ comm="GoogleTalkPlugi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="open" ##### profile="/usr/lib/chromium-browser/chromium-browser" name="/sys/devices/system/cpu/cpu3/topology/core_id" @@@@ comm="GoogleTalkPlugi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="open" ##### profile="/usr/lib/chromium-browser/chromium-browser" name="/sys/devices/system/cpu/present" @@@@ comm="GoogleTalkPlugi" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
apparmor="ALLOWED" operation="open" ##### profile="/usr/lib/chromium-browser/chromium-browser//null-16" name="/etc/ld.so.cache" @@@@ comm="lsb_release" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
For name="/ usr/lib/ i386-linux- gnu/libstdc+ +.so.6. 0.18" change lib/libstdc+ +.so* mr, lib/{@{ multiarch} ,}/libstdc+ +.so.* mr,
/usr/
to
/usr/
For name="/ lib/i386- linux-gnu/ libgcc_ s.so.1" change libgcc_ s.so* mr, {@{multiarch} /,}libgcc_ s.so* mr,
/lib/
to
/lib/
For name="/ usr/bin/ lsb_release" add bin/lsb_ release ix,
/usr/
The GoogleTalkPlugin needs access to name="/ sys/devices/ system/ cpu/cpu0/ topology/ core_id" and name="/ sys/devices/ system/ cpu/present" add devices/ system/ cpu/cpu* /topology/ core_id r, devices/ system/ cpu/present r,
/sys/
/sys/
For entries with profile= "/usr/lib/ chromium- browser/ chromium- browser/ /null-XXX" where XXX is a number this is a learning profile where apparmor doesn't know which profile the access should be added to. We selected ix above so add these entries to the /usr/lib/ chromium- browser/ chromium- browser profile.
For name="/ etc/ld. so.cache" add ld.so.cache r,
/etc/
For name="/ usr/lib/ chromium- browser/ " add lib/chromium- browser/ r,
/usr/
For name="/ usr/lib/ chromium- browser/ libs/" add lib/chromium- browser/ libs/ r,
/usr/