apparmor profiles

Hi, I found that only 2 processes are in enforce mode. 2 processes are in enforce mode : /usr/sbin/avahi-daemon (3726) /usr/sbin/nscd (3865) I want to put firefox in enforce mode. So I need a profile for that right? Is there any profile for FF already supplied with opensuse ? Or do I have to create one myself ? Thanks in advance.

On 2012-05-30 18:56, suse kid wrote:
>
> Hi, I found that only 2 processes are in enforce mode. 2 processes are
> in enforce mode : /usr/sbin/avahi-daemon (3726) /usr/sbin/nscd
> (3865) I want to put firefox in enforce mode. So I need a profile for
> that right? Is there any profile for FF already supplied with opensuse ?
> Or do I have to create one myself ? Thanks in advance.

User apps are difficult to confine. Suppose you want to upload a file…
forbidden!

However, upstream they have a collection of profiles. In the mail-list they
mentioned one for firefox.

here


Cheers / Saludos,

Carlos E. R.
(from 11.4 x86_64 “Celadon” at Telcontar)