apparmor on Ubuntu

[bashfulrobot]

Hi there, I am installing Zen on Ubuntu, for which I built a deb.

When I launch Zen, it mentions that some security features may offer less protection in the current config. Then has a link to Firefox security features warning on Linux | Firefox Help.

In that page, it gives an example apparmor config:

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile firefox-local
/home/<USER>/bin/firefox/{firefox,firefox-bin,updater}
flags=(unconfined) {
	userns,
	# Site-specific additions and overrides. See local/README for details.
	include if exists <local/firefox>
}

I have tried:

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile firefox-local
/usr/local/bin/{zen,zen-bin}
flags=(unconfined) {
	userns,
	# Site-specific additions and overrides. See local/README for details.
	include if exists <local/firefox>
}

Has anyone gotten this working? Or see anything I may have done wrong?

The pop up continually returns.

[andrefsp]

This has worked with me:

Create a file /etc/apparmor.d/zen with the following content:

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"

abi <abi/4.0>,
include <tunables/global>

profile zen <ZEN_BROWSER_BINARY> flags=(unconfined) {
  userns,

  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/zen>
}

Note that you must replace ZEN_BROWSER_BINARY with the path of the binary running your installation. In my case was /opt/zen-browser/zen/zen.

Hope this helps.