apparmor profile for chromium browser

[wylow]

Packages: apparmor 2.6.1-0ubuntu3 + apparmor-profiles 2.6.1-0ubuntu3 installed on natty.

I would like to thank first of all that is made ​​of the Chromium browser apparmor profile.
We are delighted to have found that it works perfectly.
First installation of the profile works well.
After software update, the Chromium browser "11.0.696.057 (82,915) 11.4 Ubuntu" no longer starts.
Only "complain" mode in the / etc / apparmor.d / usr.bin.chromium rule used by the browser.
Read permissions to the request
/ sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
and
/ sys/devices/pci0000: 00/0000: 00:00.0 / resource access.

The "aa-logprof" command I can not be improved.

Thank you in advance for your help.

[Jamie Strandboge (jdstrand)]

Thank you for using AppArmor and filing a bug. Can you attach your /var/log/kern.log after chromium fails to start?

[wylow (wylow)]

Yes.

[wylow (wylow)]

Kern.log.1

[wylow (wylow)]

Kern.log

[wylow (wylow)]

fresh kernel log file.

[wylow (wylow)]

Fresh kern.log file.

Chromium version 11.0.696.68~r84545-0ubuntu0.11.04.1 package.

[wylow (wylow)]

Kern.log

11.0.696.71~r86024-0ubuntu0.11.04.1 (chromium-browser)

[Jamie Strandboge (jdstrand)]

Reassigning to Micah as he will be maintaining the profile in Oneiric (where we hope to have it shipped in the package).

[Launchpad Janitor (janitor)]

This bug was fixed in the package apparmor - 2.6.1-4ubuntu3

---------------
apparmor (2.6.1-4ubuntu3) oneiric; urgency=low

  * debian/patches/0106-lp810270.patch: adjustments for /var/run -> /run,
    /var/lock -> /run/lock and /dev/shm -> /run/shm transition (LP: #810270)
  * debian/patches/0107-lp767308.patch: allow read access to
    /usr/local/share/ca-certificates (LP: #767308)
  * debian/patches/0001-add-chromium-browser.patch: updates for newer chromium
    (LP: #776648)
  * debian/patches/0108-gnome-mimeinfo.patch: allow read access to
    /usr/share/gnome/applications/mimeinfo.cache in the gnome abstraction
 -- Jamie Strandboge <email address hidden> Thu, 14 Jul 2011 09:39:49 -0500

[intrigeri (intrigeri)]

This bug report is about the custom profile shipped by Ubuntu in their apparmor-profiles package (and nowhere else AFAIK), not about the apparmor-profiles project (yeah, it's confusing, I know).