From c6a19889e91f2585453636667e3d5779b153ab86 Mon Sep 17 00:00:00 2001
From: Rene Engelhard <rene@debian.org>
Date: Thu, 18 Jan 2018 23:12:03 +0100
Subject: deb#887593 apparmor: allow soffice.bin reading .mozilla/firefox and
 .gnupg

Change-Id: I74b57cd510b1babbb4a537d307a6ffc9ee1d9ce5
---
 sysui/desktop/apparmor/program.soffice.bin | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin
index 27f7e2f34277..8aab5c155e8d 100644
--- a/sysui/desktop/apparmor/program.soffice.bin
+++ b/sysui/desktop/apparmor/program.soffice.bin
@@ -84,6 +84,8 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin {
   #include <abstractions/ibus>
   #include <abstractions/nameservice>
   #include <abstractions/gnome>
+# GnuPG1 only...
+# #include <abstractions/gnupg>
   #include <abstractions/python>
   #include <abstractions/p11-kit>
 
@@ -166,4 +168,8 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin {
   owner @{HOME}/.icons/*/cursors/*      r,
   /usr/share/*-fonts/conf.avail/*.conf  r,
   /usr/share/fonts-config/conf.avail/*.conf r,
+
+  owner @{HOME}/.mozilla/firefox/** r,
+  # there is abstractions/gnupg but that's just for gpg1...
+  owner @{HOME}/.gnupg/* r,
 }
-- 
cgit