apparmor-fixes
authorDebian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Fri, 27 Apr 2018 02:14:18 +0000 (03:14 +0100)
committerPeter Michael Green <plugwash@raspbian.org>
Fri, 27 Apr 2018 02:14:18 +0000 (03:14 +0100)
commitd8d0adca34dd0c27553f3711341d73726fba6b0e
treed05d7b4fc87791823b209f4d2e59dcc32d0f7ef7
parentbe25c5e47aa68be24619ee7edfe33a814f5a0096
apparmor-fixes

see https://gerrit.libreoffice.org/#/c/49614/.

sysui/desktop/apparmor/program.senddoc
Line 19:
why do we need to allow dbus, chrome, .. here?

See https://sources.debian.org/src/apparmor/2.12-2/profiles/apparmor.d/abstractions/ubuntu-helpers/.

(Besides that I don't like the "ubuntu" there at all, but that is an other story)

sysui/desktop/apparmor/program.senddoc
Line 19:
The other (easy) option is to have xdg-* just go to unconfined.  I'm not sure there will be a huge difference in security.

The initial version got merged to libreoffice-6-0 without the master one being
merged...

Gbp-Pq: Name apparmor-fixes.diff
sysui/desktop/apparmor/program.senddoc