diff options
| author | Vincas Dargis <vindrg@gmail.com> | 2018-08-14 22:11:39 +0300 |
|---|---|---|
| committer | Rene Engelhard <rene@debian.org> | 2018-08-14 22:15:11 +0200 |
| commit | 032c3f0d8403c6c7cdc60564641687bfb56cf9b3 (patch) | |
| tree | 5f08cae68cccda775675bdd4425cf0dbb684a93e /sysui | |
| parent | c4b0804ec4cb76dfa03321b31b4695d0058958ad (diff) | |
apparmor: fix qt-related denies
Commit c86e4ad53391d17d1eb54845b5999889f7e65061 introduced qt-related
rules, like linking to ~/.config/#[0-9]* files, though does not allow to
write the files themselves, in result producing DENIED log entries if
AppArmor profile is enabled. This is fixed by adding read-write rule for
particular files.
Change-Id: I6441398c4fcfbfcf59ba5f5b3178682c1e5d1cd5
Reviewed-on: https://gerrit.libreoffice.org/59007
Tested-by: Jenkins
Reviewed-by: Rene Engelhard <rene@debian.org>
Tested-by: Rene Engelhard <rene@debian.org>
Diffstat (limited to 'sysui')
| -rw-r--r-- | sysui/desktop/apparmor/program.soffice.bin | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin index dd71b94bff78..cf6fd4b2eac9 100644 --- a/sysui/desktop/apparmor/program.soffice.bin +++ b/sysui/desktop/apparmor/program.soffice.bin @@ -236,6 +236,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { /usr/share/kservices5/*.protocol r, # TODO: use qt5-settings-write abstraction when it is available + owner @{HOME}/.config/#[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9] rw, owner @{HOME}/.config/QtProject.conf rw, owner @{HOME}/.config/QtProject.conf.?????? l -> @{HOME}/.config/#[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9], owner @{HOME}/.config/QtProject.conf.?????? rw, # for temporary files like QtProject.conf.Aqrgeb |