You are not logged in.
Pages: 1
Hello,
I am currently working on setting up an apparmor profile for firefox.
I wanted to create a more minimalist one, but am at point where the error apparmor="DENIED" operation="userns_create" class="namespace" is causing issue, I think it relates to sandboxing.
I know I could use sys_admin or something similar but I do not want to give more permissions than I need to.
Also,
I want to setup a global profile so, all access to say /folder is denied. Then I can make an allow profile for the thing I want to be able to access it.
So I am wondering how I can allow firefox to sandbox without giving too many permissions away, and how I can make a global profile.
Thanks
Offline
Pages: 1