fix: Added apparmor profile for proper sandboxing #220

fossterer · 2025-12-06T05:24:37Z

FIXES #165

Added apparmor profile in complain mode in view of the below 3 access issues still unresolved
- Access to /home/fossterer/.pki/nssdb/cert9.db
- Access to /home/fossterer/.pki/nssdb/key4.db
- Receiving D-Bus signals from UPower (PropertiesChanged signal)

TODOs:

Document the apparmor profile better
Download Chromium source and proceed with https://github.com/browseros-ai/BrowserOS/blob/main/CONTRIBUTING.md#browser-development
Test both .AppImage (requires explicit documentation) and .deb pakcages
Reorganize files and cleanup the TODO from linux.py

NOTE: I haven't abandoned this :). I will resume work here in a week

…eros-ai#90) * feat: implement grouped message sections for thinking, planning, and execution - Add GroupedThinkingSection with collapsible thinking messages - Add GroupedPlanningSection for plan-related content - Add GroupedExecutionSection with step execution tracking - Update MessageList to use new grouped message rendering - Improve message organization and visual hierarchy * feat: add supporting components for message grouping - Add ExecutionSection for step-based execution display - Add ThinkingSection for thinking message rendering - Add animations library for smooth UI transitions - Add utility functions for message processing * feat: integrate grouped message rendering in core components - Update MessageList to use new grouped sections - Refactor MessageItem to remove TaskSteps dependencies - Implement message grouping logic for thinking/planning/execution - Optimize message rendering timing and reduce delays * feat: simplify typing indicator to minimalistic thinking animation * feat: update UI components and styling for redesigned sidepanel - Update Chat component for new message grouping - Enhance ChatInput with improved styling - Refactor CollapsibleThoughts for better integration - Update Header component styling - Add new CSS classes and Tailwind config for gradients * update loding animation * feat/ Parent Collapsible wrapper for agent activity * feat/skeleton animation for laoding * fix(chore):coloring of lines * update chatpannel * skeleton update * fix errros rendering issue * centralise skeleton calling * code cleanup * single thinking component * auto colsapse after results appears * fix/scroll position issue

…i#93)

- Extend ProviderSchema with autoSubmit, openIn, submitKey, focusBeforeSubmit flags - Update ChatGPT and Claude providers with auto-submit configuration - Centralize auto-submit logic in executeProviderAction using chrome.browserOS.sendKeys - Simplify CommandInput by removing duplicate provider handling - Enables easy scaling for future providers (Perplexity, Grok, etc.) Fixes: ChatGPT and Claude now automatically send Enter after query is pasted Follows CEO specification: get tab ID + send Enter via chrome.browserOS API

Update CLA.md

…rowseros-ai#95) * update chatmode to say use Agent mode for perform actions * fixed default examples * clean up

* make snapshot cache only 100ms TTL * ollama: replace localhost with 127.0.0.1 as it works better * fix: Plan generator in custom agent fixed * wip: limited context mode * limited context: remove goal mode * limited context mode in planner too * simple log token usage and emit * adding logging in invokeWithRetry

* enhance provider store and execute flow * replace provider settings with store-driven UI * hook dropdown components to provider store * Fix ChatGPT and Claude input injection for new tab providers * fix <inpute serach box query>

…ion fix

Two separate Windows-specific fixes: 1. Taskbar Warning Icon Fix: - Issue: Yellow warning triangle on pinned taskbar icon - Root cause: BrowserWindowPropertyManager::UpdateWindowProperties() sets PKEY_AppUserModel_RelaunchCommand/RelaunchIconResource only when shortcut_manager is non-null AND kProfileIconVersion pref exists. If either condition fails, relaunch properties are empty, causing Windows to show a warning overlay due to app identity mismatch. - Fix: Added fallback else branch that uses exe path directly as icon source and relaunch command. Ensures relaunch properties are never empty for normal browser windows. 2. VisualElements Branding Fix: - Issue: Start Menu tiles referenced chrome.VisualElementsManifest.xml - Fix: Created browseros.VisualElementsManifest.xml and updated BUILD.gn to reference it.

This reverts commit d0a27ab.

* refactor 1: new typer based cli and browseros cli module * refactor 2: fixes to context.py * refactor 3: common/ and notify * new sign and package module * update .gitignore * refactor 5: dev.py and modules for each * refactor 6: clean-up old files * refactor 7: organise modules fruther * refactor 8: renaming nxtscape to browseros * refactor 9: dev.py remove cli load * fix: pyproject.toml * fix: typer pretty exception disable * refactor 10: cli/build.py set to primary * refactor 10: cli/build.py set to primary, move OS detection * refactor: context split, env and module dataclass * reactor: clean and git moved ot new module type * refactor: compile and configure * reactor: sign and package module update * refactor: new build.py cli * 'refactor: remove reducant OS checks * refactor: rename BuildContext to Context * refactor: rename BuildModule to CommandModule * refactor: dev.py to use the new modules * build.py: improve help output * remove old patching way * clean-up: remove old build.py stuff * refactor: move to proper yaml parsing * clean-up: remove legacy args gating * fix: patches issues * fix: clean-up build.py and ars resolver * minor: gitignore * fix: patches.py issue * support universal build * fix: ENV variable and YAMLs * fix: move compile to folder to avoid compflics * fixes: more env fixes * fix: build_type override in CLI fix * fix: universal clean all archs before starting * fix: universal build type constants * fix: linter, extract options * fix: linter * fix: remove chromium_src as a not a conflicting flag * fix: support chromium_src from cli in config mode * fix: notify with better messages * feat: new apply patch with --reset-to feature * feat: refactor apply and extract into separate sub modules * 142 patches working (browseros-ai#211) * updates to build.py apply/patch * removed all old patches * 142 build update * fix: get updated patches from main to 142 * fix: correct patches dir * fix: import path * add pyright * fix: setup pyright * fix: new updated patches from 137 rebased on 142 * feat: new extract_patch command * fix: add mising side_panel build patch * fix: extension uninstall for browseros * fix: prefs fix * fix: ota extension updater patch fix * fix: llm hub and chat * feat: unvisersal module also package individual archs * fix: add browseros-server binaries * fix: attach color for notify * fix: attachment for slack * fix: update chromium version to 142.0.7444.175 * feat: add new icons needed * fix: disable settings in menu * fix: uv add build-backend * minor: chromium version bump * clean-up: removed old files of extnesion and sidepanel * fix: product logo generate and assets.car and appicon.icns * feat: few chromium UI fixes * fix: update features.yaml * fix: features.yaml path in context * refactor: rename to get_patches_dir() * feat: show browserOS version in about page * fix: copy browseros_version on the build time and rename other to offset * bump offset * fix: update features.yaml * feat: load env from .env files too * fix: enable split view * clean-up: removed old prefs * fix: minor import issue * fix: linux flag update

* feat: new upload to r2, better semantic app name, sparkle signing as part of build * feat: consistent artifact naming * minor: add additional logging in build.py * minor * feat: better notify, so it's not too verbose * refactor: rename R2UploadModule to just UploadModule * fix: sparkle signature uplaod.py * minor: debugging * fix: sparkle update and metadata for release artificats * feat: v1 release module * feat: new release cli with modules/ * minor: env update

…ccess issues still unresolved - Access to /home/fossterer/.pki/nssdb/cert9.db - Access to /home/fossterer/.pki/nssdb/key4.db - Receiving D-Bus signals from UPower (PropertiesChanged signal) **TODOs:** - Document the apparmor profile better - Download Chromium source and proceed with https://github.com/browseros-ai/BrowserOS/blob/main/CONTRIBUTING.md#browser-development - Test both .AppImage (requires explicit documentation) and .deb pakcages - Reorganize files and cleanup the TODO from `linux.py`

github-actions · 2025-12-06T05:24:46Z

CLA Assistant Lite bot ✅ All contributors have signed the CLA. Thank you for helping make BrowserOS better!
_{Posted by the CLA Assistant Lite bot.}

fossterer · 2025-12-06T05:28:01Z

I have read the CLA Document and I hereby sign the CLA

fossterer · 2025-12-06T05:32:02Z

packages/browseros/resources/entitlements/browseros

+# application a name instead of having the label "unconfined"
+
+
+profile browseros /tmp/.mount_Brows*/opt/browseros/browseros flags=(complain) {


This path is reflective of how AppImage is mounted. DEB does not use this path

fossterer · 2025-12-19T10:24:15Z

@shadowfax92 ,

To validate that my changes here get into the resulting .deb, I am attempting to build using https://github.com/browseros-ai/BrowserOS/blob/main/CONTRIBUTING.md#quick-setup-1.
I couldn't find a build.py but rather a build/browseros.py looked promising.

However, as I used python build/browser.py [..], I am being told that certain python packages (in this case, typer which is being imported by browser.py) are not found.
I might be missing more steps.

Can you share the current build steps please?

Thanks

fossterer · 2025-12-21T16:27:12Z

For the record, in the mean time, I went ahead with Step-1 - Checkout Chromium source and I am blocked as described in https://groups.google.com/a/chromium.org/g/build/c/LWfZvpZIeok.

I don't think that is a necessary step for this MR though. Please let me know if that is an incorrect assumption.

Thanks

shadowfax92 · 2025-12-31T23:01:02Z

@fossterer thank you so much for contributing! I'll test it out and merge.

My bad, I'll update the contributing guide. It's slightly outdated. Sorry about that.

shadowfax92 and others added 30 commits September 15, 2025 07:43

add tool usage frequency metrics

a5f46e2

make snapshot cache only 100ms TTL

cc53716

fix: resolve scroll misalignment on side panel home page (browseros-a…

920ab96

…i#93)

Merge pull request browseros-ai#110 from siddharth4572/patch-3

c2485de

Update CLA.md

Merge branch 'main' of https://github.com/browseros-ai/BrowserOS-agent

8df089d

ollama: replace localhost with 127.0.0.1 as it works better

340962d

Improve Chat Mode UX with better action guidance and fixed examples (b…

6c7fda5

…rowseros-ai#95) * update chatmode to say use Agent mode for perform actions * fixed default examples * clean up

Minor change

a344451

Merge branch 'main' of https://github.com/browseros-ai/BrowserOS-agent

34c422f

Merge branch 'main' of https://github.com/browseros-ai/BrowserOS-agent

c71254f

revert chatAgent.prompts changes (browseros-ai#97)

6b38f94

design doc

184b7df

dev_cli - basic structure and modules

7e24b2b

add 14 px inter for all the messages (browseros-ai#99)

336f221

dev_cli - implemented

164c275

dev cli - extract against base chromium

f993b91

update path of chromium replace files dir

55fea33

build.py patches.py has a flag to use the new patching

8c81379

adding --base in extract range with squash

d6826f3

new patches

4fae8c4

first run patch

c91db77

Ui changes and alignment (browseros-ai#100)

9c38efa

Add newtab custom provider (browseros-ai#98)

bc6689e

* enhance provider store and execute flow * replace provider settings with store-driven UI * hook dropdown components to provider store * Fix ChatGPT and Claude input injection for new tab providers * fix <inpute serach box query>

udpate patches to chromium_patches

d5caf79

remove .patch suffix

e83e166

fix apply patches from patches.py build

f4b4576

inject version no longer needed

f0d6378

felarof99 and others added 21 commits November 13, 2025 23:08

chore: sync packages/browseros-agent submodule (to bcfac0f)

d5e4bf6

chore: sync packages/browseros-agent submodule (to 3b55502)

4efaa53

fix: update top-issues yml to be more descriptive

56311ab

chore: sync packages/browseros-agent submodule (to 72b6c63)

082af0f

Create SECURITY.md

c6e3ee1

Update SECURITY.md

c3bbe97

chore: sync packages/browseros-agent submodule (to d964b00)

7df822b

chore: sync packages/browseros-agent submodule (to 343f1e5)

ad6c1db

Update chrome_browser_main.cc patch to handle iCloud Passwords Extens…

95b97f9

…ion fix

docs: MagellaX signed the CLA in browseros-ai/BrowserOS#$pullRequestNo

7579253

Revert "fix(windows): warning icon when pinned on taskbar on windows"

1790423

This reverts commit d0a27ab.

bump offset & version

004b579

clean-up: removed old build files

e8db9c4

fix: extension pinning

dfa329d

bump offset & version

be51e85

chore: sync packages/browseros-agent submodule (to 63f2739)

96decaa

chore: sync packages/browseros-agent submodule (to c433d9c)

8ba6a24

fossterer commented Dec 6, 2025

View reviewed changes

shadowfax92 self-assigned this Dec 31, 2025

felarof99 force-pushed the main branch 2 times, most recently from 01ade27 to 84e3e1c Compare January 7, 2026 00:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: Added apparmor profile for proper sandboxing #220

fix: Added apparmor profile for proper sandboxing #220

Uh oh!

fossterer commented Dec 6, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 6, 2025 •

edited

Loading

Uh oh!

fossterer commented Dec 6, 2025

Uh oh!

fossterer Dec 6, 2025

Uh oh!

fossterer commented Dec 19, 2025

Uh oh!

fossterer commented Dec 21, 2025 •

edited

Loading

Uh oh!

shadowfax92 commented Dec 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

		# application a name instead of having the label "unconfined"


		profile browseros /tmp/.mount_Brows*/opt/browseros/browseros flags=(complain) {

fix: Added apparmor profile for proper sandboxing #220

Are you sure you want to change the base?

fix: Added apparmor profile for proper sandboxing #220

Uh oh!

Conversation

fossterer commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fossterer commented Dec 6, 2025

Uh oh!

fossterer Dec 6, 2025

Choose a reason for hiding this comment

Uh oh!

fossterer commented Dec 19, 2025

Uh oh!

fossterer commented Dec 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

shadowfax92 commented Dec 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

fossterer commented Dec 6, 2025 •

edited

Loading

github-actions bot commented Dec 6, 2025 •

edited

Loading

fossterer commented Dec 21, 2025 •

edited

Loading