apparmor: use dri-enumerate abstraction
authorVincas Dargis <vindrg@gmail.com>
Sat, 4 Aug 2018 14:40:05 +0000 (17:40 +0300)
committerRene Engelhard <rene@debian.org>
Sun, 12 Aug 2018 06:13:03 +0000 (07:13 +0100)
Remove backported rule and use new dri-enumerate abstraction instead.
dri-enumerate is available in AppArmor 2.13, which recently migrated
into Debian Buster.

Change-Id: I64919edc1882f7bc1e65cfb94686464c5350f699

Gbp-Pq: Name apparmor-cleanups.diff

sysui/desktop/apparmor/program.soffice.bin

index 6e7de1e76184abc51cb81e8ef6908178e5d6fc2f..5093befbd34e026ae4725fe5a9485f716a81d157 100644 (file)
@@ -82,6 +82,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
   #include <abstractions/dbus>
   #include <abstractions/dbus-session>
   #include <abstractions/dbus-accessibility>
+  #include <abstractions/dri-enumerate>
   #include <abstractions/ibus>
   #include <abstractions/nameservice>
   #include <abstractions/gnome>
@@ -176,7 +177,6 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
 
   #Likely moving to abstractions in the future
   owner @{HOME}/.icons/*/cursors/*      r,
-  /sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r, # for libdrm
   /usr/share/*-fonts/conf.avail/*.conf  r,
   /usr/share/fonts-config/conf.avail/*.conf r,