Public bug reported:

Hi,
when both firefox and firefox-esr packages are installed, apparmor complains 
about a duplicate "firefox" profile.

# aa-disable /etc/apparmor.d/usr.bin.firefox

ERROR: Conflicting profiles for firefox defined in two files:
- /etc/apparmor.d/usr.bin.firefox-esr
- /etc/apparmor.d/usr.bin.firefox


Which can be verified:

/etc/apparmor.d/usr.bin.firefox-esr: profile firefox 
/usr/lib/firefox-esr/firefox{,*[^s][^h]} {
/etc/apparmor.d/usr.bin.firefox: profile firefox 
/usr/lib/firefox/firefox{,*[^s][^h]} {


Changing "profile firefox" to "profile firefox-esr" in
/etc/apparmor.d/usr.bin.firefox-esr fixes the problem.


Also, the include at the end of /etc/apparmor.d/usr.bin.firefox-esr should be
changed to include local/usr.bin.firefox-esr.

In summary the changes are:

diff-u a/usr.bin.firefox-esr b/usr.bin.firefox-esr                     
--- a/usr.bin.firefox-esr   2025-01-29 10:36:49.815375909 +0100
+++ b/usr.bin.firefox-esr   2025-01-29 10:37:03.784199049 +0100
@@ -11,7 +11,7 @@
 #  /usr/lib/firefox-esr/firefox
 # but not:
 #  /usr/lib/firefox-esr/firefox.sh
-profile firefox /usr/lib/firefox-esr/firefox{,*[^s][^h]} {
+profile firefox-esr /usr/lib/firefox-esr/firefox{,*[^s][^h]} {
   #include <abstractions/audio>
   #include <abstractions/cups-client>
   #include <abstractions/dbus-strict>
@@ -329,5 +329,5 @@
   #include <abstractions/ubuntu-browsers.d/firefox>
 
   # Site-specific additions and overrides. See local/README for details.
-  #include <local/usr.bin.firefox>
+  #include <local/usr.bin.firefox-esr>
 }

Thanks,

Charles

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2096910

Title:
  The firefox-esr apparmor profile conflicts with the firefox apparmor
  profile

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2096910/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to