Would it be possible for chrome/chromium package to include an apparmour config that says that chrome suid binary is ok even when run from inside the guest account? (I don't know the limits of apparmour configuration.)
Would it be possible for chrome/chromium package to include an apparmour config that says that chrome suid binary is ok even when run from inside the guest account? (I don't know the limits of apparmour configuration.)