apparmor-fixes
authorDebian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Wed, 28 Feb 2018 17:37:57 +0000 (17:37 +0000)
committerRene Engelhard <rene@debian.org>
Wed, 28 Feb 2018 17:37:57 +0000 (17:37 +0000)
commit9285e2889ad983a43c9423014d9ef60487bd22f6
tree153279bec7ee781c38e013ece6c3423cb806d3f1
parent356ab3ab2ec848ba92c36650e88ea9abc4b521a4
apparmor-fixes

see https://gerrit.libreoffice.org/#/c/49614/.

sysui/desktop/apparmor/program.senddoc
Line 19:
why do we need to allow dbus, chrome, .. here?

See https://sources.debian.org/src/apparmor/2.12-2/profiles/apparmor.d/abstractions/ubuntu-helpers/.

(Besides that I don't like the "ubuntu" there at all, but that is an other story)

sysui/desktop/apparmor/program.senddoc
Line 19:
The other (easy) option is to have xdg-* just go to unconfined.  I'm not sure there will be a huge difference in security.

The initial version got merged to libreoffice-6-0 without the master one being
merged...

Gbp-Pq: Name apparmor-fixes.diff
sysui/desktop/apparmor/program.senddoc