summaryrefslogtreecommitdiff
path: root/sysui
AgeCommit message (Collapse)Author
2018-08-29Removed executable permission on simple ASCII filesAndrea Gelmini
Change-Id: I3feef220283d57fd07cff836ddd22937b1b8c77f Reviewed-on: https://gerrit.libreoffice.org/57593 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> Tested-by: Caolán McNamara <caolanm@redhat.com>
2018-08-27apparmor: fix printing to fileVincas Dargis
AppArmor denies writing to .ps files and dealing with temporaries needed for "Print to file" functionality. Add .ps to the allowed extensions list, also giving access to rm executable together with writing printing-related temporary file. Change-Id: I415e1401878bff6459f42162d4e8b517261b9cec Reviewed-on: https://gerrit.libreoffice.org/59114 Tested-by: Jenkins Reviewed-by: Rene Engelhard <rene@debian.org>
2018-08-26boostrap->bootstrapCaolán McNamara
Change-Id: I3082130a39a55609fa38fbf9a667fb95fe6d60ea Reviewed-on: https://gerrit.libreoffice.org/59612 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolanm@redhat.com> Tested-by: Caolán McNamara <caolanm@redhat.com>
2018-08-15apparmor: fix access to /etc/xml/catalogVincas Dargis
Exporting document to .xhtml produces AppArmor deny log entry. Add AppArmor rule for accessing /etc/xml/catalog as it is needed by libxml2. Change-Id: If62046059c4e1d458cca895f14f7d1e3f537c527 Reviewed-on: https://gerrit.libreoffice.org/59005 Tested-by: Jenkins Reviewed-by: Rene Engelhard <rene@debian.org>
2018-08-15apparmor: allow writing .epub filesVincas Dargis
Currently, exporting document to .epub fails if AppArmor profile is enabled. This patch fixes it by registering .epub extension within AppArmor profile. Change-Id: I5075ac803ffd9157c2f2cc6546895149b0fdd5f2 Reviewed-on: https://gerrit.libreoffice.org/59004 Tested-by: Jenkins Reviewed-by: Rene Engelhard <rene@debian.org>
2018-08-14apparmor: fix qt-related deniesVincas Dargis
Commit c86e4ad53391d17d1eb54845b5999889f7e65061 introduced qt-related rules, like linking to ~/.config/#[0-9]* files, though does not allow to write the files themselves, in result producing DENIED log entries if AppArmor profile is enabled. This is fixed by adding read-write rule for particular files. Change-Id: I6441398c4fcfbfcf59ba5f5b3178682c1e5d1cd5 Reviewed-on: https://gerrit.libreoffice.org/59007 Tested-by: Jenkins Reviewed-by: Rene Engelhard <rene@debian.org> Tested-by: Rene Engelhard <rene@debian.org>
2018-08-14Fix typosAndrea Gelmini
Change-Id: Ia717a116056bddc7968a3e451058a94cb2bbbd29 Reviewed-on: https://gerrit.libreoffice.org/59003 Reviewed-by: Jean-Pierre Ledure <jp@ledure.be> Tested-by: Jean-Pierre Ledure <jp@ledure.be> Tested-by: Jenkins
2018-08-14tdf#116856 Update screenshot imagesXisco Fauli
Taken from https://www.libreoffice.org/discover/screenshots/ Thanks to guilhem for creating the hub redirection Change-Id: I57a8fb928e9353d9b305c2e1b09b4f0dd13624f6 Reviewed-on: https://gerrit.libreoffice.org/52767 Tested-by: Jenkins Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
2018-08-14apparmor: update program.soffice.bin for KDEVincas Dargis
Add rules to fix file dialog and other issues with 6.2 alpha1 on Debian Buster with KDE desktop. Change-Id: Ib1b20c5809ac9bdea1bf2623eff4345fa42fd4f3 Reviewed-on: https://gerrit.libreoffice.org/58702 Tested-by: Jenkins Reviewed-by: Jan-Marek Glogowski <glogow@fbihome.de> Reviewed-by: Katarina Behrens <Katarina.Behrens@cib.de>
2018-08-10test apparmor profile parsing (see tdf#114915)Rene Engelhard
idea taken from https://salsa.debian.org/apparmor-team/apparmor-profiles-extra/commit/7fbcc4788d0e94764eeeff2f080796601241f986#546c1096cd506dbb01a47ed87a636a8e94d83b8c Change-Id: I7e5bda9224d69530af4d30422c2fd3d60c9929d6 Reviewed-on: https://gerrit.libreoffice.org/55770 Tested-by: Jenkins Tested-by: Rene Engelhard <rene@debian.org> Reviewed-by: Olivier Tilloy <olivier.tilloy@canonical.com> Reviewed-by: Rene Engelhard <rene@debian.org>
2018-08-07deb#905442 apparmor: fix saving files in enforced modeVincas Dargis
Add rule to allow creating temporary files like `lu6924jgpjkq.tmp`, because without it files cannot be saved. Change-Id: I640897df5d325e2d01da16840034abbd095fb276 Reviewed-on: https://gerrit.libreoffice.org/58672 Tested-by: Jenkins Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>
2018-07-18Fix typosAndrea Gelmini
Change-Id: I5195d13b351c0eebad1eae901f7ce8408a9e5c92 Reviewed-on: https://gerrit.libreoffice.org/57028 Tested-by: Jenkins Reviewed-by: Christian Lohmaier <lohmaier+LibreOffice@googlemail.com>
2018-07-11sysui: try to fix Mac instsetsMichael Stahl
7c6ca00e61c42bb7c43cbb7a3203d8bad5c0ed0e broke the Mac build, because the files from infoplist Package have double "/" because of the empty path in the call to gb_Package_add_files. Change-Id: I3a72e8de0a8f2256b068a491231aaaa3d3b00b6e
2018-07-03App icon updateandreas kainz
Change-Id: I3ac392f903644281c6a1ccb9183fbe1c72b78311 Reviewed-on: https://gerrit.libreoffice.org/56847 Tested-by: Jenkins Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-25update app icns iconsandreas kainz
thanks Mike Saunders Change-Id: I7d358a4ccebc008efc67874db5d3f05efc80444a Reviewed-on: https://gerrit.libreoffice.org/56207 Tested-by: Jenkins Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-17fix packaging break after bindir handling & new iconsChristian Lohmaier
Change-Id: Ieacbf46f22d4943542ff318aa8236aacab255460
2018-06-13Respect --bindir..orbea
Change-Id: I2ed73a296b813de722156c69ac64cf9d6cff199d Reviewed-on: https://gerrit.libreoffice.org/55197 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Rene Engelhard <rene@debian.org>
2018-06-12app icons: update locolor iconsandreas kainz
Change-Id: I421a9e04464f8b722d100982d359b0b8c4a33585 Reviewed-on: https://gerrit.libreoffice.org/55702 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-11app icon update ico png and svg support finishedandreas kainz
Change-Id: Ibfc58322efb4f038298caff01f644a4ada78b69a Reviewed-on: https://gerrit.libreoffice.org/55568 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-09App icons: add 22,24,64px size app and mimetype LibO iconsandreas kainz
Change-Id: Ic3bc840467e7af6d9f2d0b5f105b316d4d12193e Reviewed-on: https://gerrit.libreoffice.org/55492 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-06App and Mimetype update to new flat designandreas kainz
Change-Id: Id17b0d8e26658bc3b140bd26a37a990e51e08409 Reviewed-on: https://gerrit.libreoffice.org/55356 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-04update writer app ico fileandreas kainz
Change-Id: I3fc6d8baf9dfb7270eedd7ce0d473a56241c10d5 Reviewed-on: https://gerrit.libreoffice.org/55285 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-06-02Removed executable permission on data filesAndrea Gelmini
chmod -x to complete Change-Id: I966773e0adebf8563343856f18ba25ba84b0a633 Reviewed-on: https://gerrit.libreoffice.org/53666 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Thorsten Behrens <Thorsten.Behrens@CIB.de>
2018-06-01Mimetype icon update for apps and impressandreas kainz
Change-Id: I99d47fe7845740b02f85af3de39bc177424894e7 Reviewed-on: https://gerrit.libreoffice.org/55175 Reviewed-by: andreas_kainz <kainz.a@gmail.com> Tested-by: andreas_kainz <kainz.a@gmail.com>
2018-05-31Mimetype icon update writer and calcandreas kainz
Change-Id: I98dfdff303a6c54db68725799796c89e903c6524 Reviewed-on: https://gerrit.libreoffice.org/54990 Reviewed-by: andreas_kainz <kainz.a@gmail.com> Tested-by: andreas_kainz <kainz.a@gmail.com>
2018-05-24revert accidentially committed partRene Engelhard
Change-Id: I778feac0b50390f59a3621279636f8b09ed3def2
2018-05-24apparmor: allow also /usr/lib{,32,64}/jvm/**/bin/javaRene Engelhard
since /usr/lib{,32,64}/jvm/**/jre/bin/java doesn't exist since OpenJDK 9 Change-Id: Ic9c052a756ba4a93595595da98148ff22169d333
2018-05-23deb#899380 apparmor: fix gpg encryption hang trying to lock random_seedRene Engelhard
Change-Id: Ib9fb7652922dcc8364567953d17d7cae8ad170a7 Reviewed-on: https://gerrit.libreoffice.org/54726 Reviewed-by: Rene Engelhard <rene@debian.org> Tested-by: Rene Engelhard <rene@debian.org>
2018-05-23remove Linux ("UNX") systray "Quickstarter"Rene Engelhard
Change-Id: Ie0e8b8b7ad59ee640d6b195dfae1a7cf745056fd Reviewed-on: https://gerrit.libreoffice.org/54543 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Michael Stahl <Michael.Stahl@cib.de>
2018-05-04Removed executable permission on data fileAndrea Gelmini
Change-Id: I0f86653ff94cead486f6c158e875f07533e1cb5d Reviewed-on: https://gerrit.libreoffice.org/53687 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Thorsten Behrens <Thorsten.Behrens@CIB.de>
2018-04-15use the standard name pattern for a packageDavid Tardon
Change-Id: Ia5bf93d6af6ff301439ef04593fcb1d13ab3aa9f
2018-03-01tdf#116086 Apparmor profiles fixes for xslm file extensionOlivier Tilloy
This allows opening files with the xlsm and xltm extensions (Excel macro-enabled workbooks and templates). Change-Id: I9282f83ff15108a703b98f1752eeee94a2f174c1 Reviewed-on: https://gerrit.libreoffice.org/50514 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Thorsten Behrens <Thorsten.Behrens@CIB.de>
2018-02-19apparmor: allow cert9.dbRene Engelhard
... as used by firefox >= 58 Change-Id: I2769020327d3d097f734ab2c152bee2474b99767
2018-02-18tdf#115554: Fix ownership in desktop-integration tarsMichael Weghorn
Use fakeroot to call tar when creating the tar.gz archives holding the desktop-integration parts to have root:root as owner of the files inside those. Change-Id: Idcdcb4dd398f330773671266dafb354711b0f093 Reviewed-on: https://gerrit.libreoffice.org/49827 Reviewed-by: Michael Stahl <mstahl@redhat.com> Tested-by: Michael Stahl <mstahl@redhat.com> Reviewed-by: Thorsten Behrens <Thorsten.Behrens@CIB.de>
2018-02-18tdf#115554: Use 'fakeroot' to build Debian packagesMichael Weghorn
The command to create Debian packages must be run as root or faked to be run as root. The 'fakeroot' makes sure the command is run in an environment faking root privileges for file manipulation. This makes sure that file ownerships and permissions inside the created deb packages are correct. Using fakeroot instead of the custom "libgetuid" makes it unnecessary to care about internals of the underlying tools (like tar) and changes in those by ourselves. Change-Id: I2cbb203ab84f740377e535c1051c2b879779b164 Reviewed-on: https://gerrit.libreoffice.org/49597 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Michael Stahl <mstahl@redhat.com> Reviewed-by: Thorsten Behrens <Thorsten.Behrens@CIB.de>
2018-02-14initial apparmor stuff for lo_kde5filepickerRene Engelhard
Change-Id: I310f44bb7145449560aa28d5b33272ece0b307c2
2018-02-14tdf#115659 Apparmor profile fixes for senddocOlivier Tilloy
Fix sending the current document by e-mail: - fix path to the installed senddoc executable - add missing exception for xdg-email - execute xdg-open and xdg-email unconfined Change-Id: Ie7c5b112bd6c415036490e9f0f81063ca3ced5a1 Reviewed-on: https://gerrit.libreoffice.org/49614 Reviewed-by: Rene Engelhard <rene@debian.org> Tested-by: Jenkins <ci@libreoffice.org>
2018-02-06state that you're doing the re-revert because the previous revert was by ↵andreas_kainz
accident Revert "Revert "tdf#98141 add svg file for all app icons in all sizes"" This reverts commit 6ec4b1d0d4592a1e3c36151a062bd713a7939d14. Change-Id: I4c18c0fa3089824a18d25d7450b8dd52e410d514 Reviewed-on: https://gerrit.libreoffice.org/49136 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-02-02Revert "tdf#98141 add svg file for all app icons in all sizes"andreas_kainz
This reverts commit 61be109b1c10df3ddbb27f2a398b121a7c977f30. Change-Id: I1e3dc953154a6b75ffb507e9dc554df1acea45bf Reviewed-on: https://gerrit.libreoffice.org/47442 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: andreas_kainz <kainz.a@gmail.com>
2018-02-01apparmor: fix @{HOME}/.mozilla/firefox access for XML signingRene Engelhard
the #include <abstractions/private-files-strict> bringing "audit deny @{HOME}/.mozilla/** mrwkl," in actually denies everything here. Use just <abstractions/private-files> and allow profiles.ini, secmod.db and cert8.db. At least opening the Digital Signatures dialog doesn't log apparmor DENIED now... Change-Id: Id557626fc26745841f0cca005d483fd1e6ac922d Reviewed-on: https://gerrit.libreoffice.org/48264 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Michael Stahl <mstahl@redhat.com>
2018-02-01Pass also webdavs:// URLs directly to soffice binaryKatarina Behrens
instead of going via kioexec & temp file Change-Id: I48ed5de97a2914025f01884f5ed0d0edce452112 Reviewed-on: https://gerrit.libreoffice.org/48900 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Katarina Behrens <Katarina.Behrens@cib.de>
2018-01-28tdf#115208 Apparmor profile update (allow JVM execution)Olivier Tilloy
Change-Id: I2911066f77fcd79b05c5247ea1086b671d546216
2018-01-21deb#887593 apparmor: allow reading device informationVincas Dargis
* Add file read rule for paths like /sys/devices/virtual/block/dm-0/queue/rotational used by isRotational() in desktop/unx/source/pagenin.c. * Add file read rule for paths like /sys/dev/char/226:128/device/uevent used by libdrm. Change-Id: Ic41365b478c817b6766e25adadd6761fa03ff055 Reviewed-on: https://gerrit.libreoffice.org/48265 Tested-by: Rene Engelhard <rene@debian.org> Reviewed-by: Rene Engelhard <rene@debian.org> Tested-by: Jenkins <ci@libreoffice.org>
2018-01-21remove accidentially committed flags=(complain)Rene Engelhard
Change-Id: Ia7116f77298b87d87221c80896b11a293d33f726
2018-01-21apparmor: allow running the "certificate manager" applications for gpgRene Engelhard
Change-Id: Ic71e05d7561e1dcb532795dbf0b6e9309c1032d2
2018-01-20readd lost commentRene Engelhard
Change-Id: I99e3b3941f0478213ec9efe6b5152f2d780a8d00
2018-01-20deb#887593 make gpg child profile really workRene Engelhard
now I can see my testkey and sign. Thanks Christian Bolz Change-Id: Idd46e7f7d2e16cf24bbdee10ecad772baaaa7f4a
2018-01-20deb#887593 use child profile for gpgRene Engelhard
see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887593#41 Change-Id: I365de8bf8a43a1aa304c5206a1f0c29d6a44855e
2018-01-18update copyright yearsRene Engelhard
Change-Id: I634c1132265295f90f624a53b93dddb2b18eabd5
2018-01-18deb#887593 apparmor: allow soffice.bin reading .mozilla/firefox and .gnupgRene Engelhard
Change-Id: I74b57cd510b1babbb4a537d307a6ffc9ee1d9ce5
generated by cgit (git 2.34.1) at 2024-12-29 17:29:52 +0000