On Tue, 2014 May  6 23:39+0200, Yves-Alexis Perez wrote:
> 
> Line 20 is:
> 
>   # Allow ptracing processes in the chromium child profile
>   ptrace peer=/usr/lib/lightdm/lightdm-guest-session//chromium,

Oh, okay, so it's different in sid. In jessie, it's "capability
sys_admin," which otherwise appears to be supported syntax.

> So I guess commenting the ptrace part should be fine?

I think so, if for no other reason that the profile is unused :)  It
does seem that Chromium needs ptrace permission for its own form of IPC---
the profile in jessie appears to cover this with "capability
sys_ptrace," which I'm guessing is coarser-grained than "ptrace
peer=...". So the worse that should happen is that Chromium doesn't
work, in a non-existent LightDM guest session on Debian...


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to