[Feature]: Enable Sandbox mode for MS Edge on Ubuntu 24.04 and UP

[hifron]

Describe the feature/enhancement you need

Enable Sandbox mode for MS Edge on Ubuntu 24.04 and UP.

For this there is need apparmor profile on Ubuntu Linux 24.04 due changes security restrictions as described here:
https://bugs.launchpad.net/apparmor/+bug/2046844

There are also projects on Github with some prepackaged apparmor.d profiles, but application should have this file with its deb installation file

The scenario/use case where you would use this feature

deb msedge installation file should have this file during install or msedge upgrade for next version.

Problem is that msedge is without source and without reproducible build and chromium project is not for this. So please make such apparmor profile for msedge and package it with msedge or contact Ubuntu support to make such file in their apparmor default settings...

How important is this request to you?

Impactful. My app's user experience would be significantly compromised without it.

Suggested implementation

No response

What does your app do? Is there a pending deadline for this request?

If not made, then edge://sandbox/ could report something like this:

You are adequately sandboxed. but without Ptrace Protection with Yama LSM (Non-broker)

and edge://gpu/ report that Driver: Sandboxed : false

[sivMSFT]

Hi @hifron,

Thank you for reaching out. Based on your request, it appears this issue is related to Microsoft Edge. You can find more details on how to contact the team for this issue here.

[sivMSFT]

Hi @hifron,

In case you have anything in terms of Webview2, you can reopen the issue and share more info