apparmor profile support for (more editors for) it's all text

[James Troup]

Binary package hint: firefox-3.5

I'm now happily running the apparmor profile for firefox; the only problem I ran into is that it broke It's All Text. I fixed it for me with the attached patch which adds a few editors that I use or know others use with IAT. Obviously this is a bit of 'how long is a piece of string' problem, or at least 'how many editors are there in Ubuntu', so I don't know if you want to add this kind of patch or not.

[Jamie Strandboge (jdstrand)]

Fix committed to firefox-3.6.head. It will be in the next upload to Lucid.

[Launchpad Janitor (janitor)]

This bug was fixed in the package firefox - 3.6.2+nobinonly-0ubuntu1

---------------
firefox (3.6.2+nobinonly-0ubuntu1) lucid; urgency=low

  * New upstream release v3.6.2 (FIREFOX_3_6_2_RELEASE)

  [ Felix Geyer <email address hidden> ]
  * Rebase mozilla-kde.patch for 3.6.2
    - update debian/patches/mozilla-kde.patch

  [ Jamie Strandboge <<email address hidden> > ]
  * AppArmor profile cleanup for Lucid users:
    - remove sys_ptrace now that the kernel DTRT (LP: #498317)
    - don't use @{PROC}/[0-9]*/mounts or /etc/gnome/defaults.list (part of
      gnome abstraction now)
    - don't use @{PROC}/[0-9]*/maps (part of base abstraction)
    - don't use /etc/sound (part of audio abstraction)
    - use 'owner' for Desktop and all dot files and directories in @{HOME}
    - use ubuntu-bittorrent-clients abstraction
    - use ubuntu-media-players abstraction
    - allow access to xubuntu default app list (LP: #500231)
    - add ark and xarchiver for KDE and XFCE archive managers
    - add thunar for XFCE
    - add editors supported by It's All Text, thanks to James Troup
      (LP: #507711)
    - allow RealPlayer plugin and access to /usr/local/lib (LP: #501822)
    - allow Ux for scim and scim-bridge
    - allow ix for gst-plugin-scanner
  * ship different AppArmor profiles for different releases:
    - move usr.bin.firefox.apparmor.in to usr.bin.firefox.apparmor.9.10
    - add usr.bin.firefox.apparmor.10.04
    - debian/rules: ship AppArmor profile based on release:
      + add DISTRIB, DISTRIB_VERSION_MAJOR and DISTRIB_VERSION_MINOR
      + ship 9.10 profile for Karmic and under and 10.04 profile for Lucid
        and later
  * update AppArmor profile to transition to a java child profile rather
    than Ux. This has the added benefit of restricting java a bit more than
    before. This is needed since the java plugins are expecting certain
    environment variables to be present, which get scrubbed with Ux. 'cx'
    doesn't remove these from the environment but allows for better profiling
    over 'ux'. Thanks to John Johansen for discussion and idea. (LP: #484148)

  [ Alexander Sack <email address hidden> ]
  * fix LP: #518422 - Firefox does not start with certain addons installed;
    don't normalize paths for xpti.dat
    - add debian/patches/lp518422.patch
    - update debian/series

  [ Micah Gersten <email address hidden> ]
  * Bump minimum system NSS to 3.12.6 after upstream landing of (bmo: 545755)
    aka Update Mozilla stable branches to NSS 3.12.6 and minimal support for
    RFC 5746
    - update debian/rules
  * Really fix FTBFS for sparc; Add configure flag to correct variable
    - update debian/rules
 -- Micah Gersten <email address hidden> Wed, 24 Mar 2010 01:17:46 -0500

[Lorenzo (gnufranc)]

Hi, today I tried hard to make "It's all Text" Firefox add-on to work with Emacs on Ubuntu Lucid, until I discovered that was an AppArmor-related problem.

In order to ease things for other users who, like me, use Emacs, I would suggest you to include the following line in Firefox AppArmor profile:

/usr/bin/emacs-snapshot-gtk Uxr,

[Micah Gersten (micahg)]

Please file a new bug for this.

On 10/17/2010 07:24 AM, Lorenzo wrote:
> Hi, today I tried hard to make "It's all Text" Firefox add-on to work
> with Emacs on Ubuntu Lucid, until I discovered that was an AppArmor-
> related problem.
>
> In order to ease things for other users who, like me, use Emacs, I would
> suggest you to include the following line in Firefox AppArmor profile:
>
> /usr/bin/emacs-snapshot-gtk Uxr,
>