deb#905442 apparmor: fix saving files in enforced mode

Add rule to allow creating temporary files like `lu6924jgpjkq.tmp`,
because without it files cannot be saved.

Change-Id: I640897df5d325e2d01da16840034abbd095fb276
Reviewed-on: https://gerrit.libreoffice.org/58672
Tested-by: Jenkins
Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>
(cherry picked from commit 8ca83479ab1f921a14a366432a513a904af0dd20)
Reviewed-on: https://gerrit.libreoffice.org/58677
Reviewed-by: Rene Engelhard <rene@debian.org>
Tested-by: Rene Engelhard <rene@debian.org>
Gbp-Pq: Name apparmor-fixes.diff

diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin
index 5093befbd34e026ae4725fe5a9485f716a81d157..0b1dc8eb5500d5e049202b379d1559936ef5c690 100644 (file)
--- a/sysui/desktop/apparmor/program.soffice.bin
+++ b/sysui/desktop/apparmor/program.soffice.bin
@@ -98,6 +98,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
   owner @{libo_user_dirs}/**/           rw,  #allow creating directories that we own
   owner @{libo_user_dirs}/**~lock.*     rw,  #lock file support
   owner @{libo_user_dirs}/**.@{libreoffice_ext} rwk,  #Open files rw with the right exts
+  owner @{libo_user_dirs}/{,**/}lu??????????{,?}.tmp rwk, #Temporary file used when saving
 
   # Settings
   /etc/libreoffice/                     r,