Firefox profile and ~/Downloads, ~/Public permission.

Asked by daniel CURTIS on 2013-04-10

Hi. As we know, default Firefox profile contains something like this;

,-----[ Default profile allows (...) ]
| owner @{HOME}/ r,
| owner @{HOME}/Public/ r,
| owner @{HOME}/Public/* r,
| owner @{HOME}/Download/ r,
| owner @{HOME}/Download/* rw,
`-----

Default profile allows downloads to ~/Downloads and uploads from ~/Public, right? So, what should I do or add to achieve this functionality. For now I can upload and download files everywhere I want. I would like to achieve that the profile will block (permission denied etc.) any attempts to save files in another directory.

I've added a one option, but it did not work;

,-----[ added option ]
| deny @{HOME}/ r,
`-----

Best regards.

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu apparmor Edit question
Assignee:
No assignee Edit question
Last query:
2013-04-10
Last reply:
2018-04-28

You can upload and download files from wherever you desire, provided you have the correct access.

daniel CURTIS (anoda) said : #2

Hi Andrew. Thank you for the information, but I would like to achieve situation where Firefox/user can not save file anywhere; just in Download directory. The same thing applies to upload files and Public directory. I'd like to do that for security reasons. Default Firefox profile is good, but in my opinion missing a few features.

A. Denton (aquina) said : #3

A solution would be to remove the @ mentions and specify manually. Everything not specified explicitly will be denied then.

Can you help with this problem?

Provide an answer of your own, or ask daniel CURTIS for more information if necessary.

To post a message you must log in.