[libreoffice] 03/03: allow file_mmap in xpdfimport profile; finally makes it work

[Rene Engelhard]

This is an automated email from the git hooks/post-receive script.

rene pushed a commit to branch debian-experimental-5.4
in repository libreoffice.

commit 2684a71444df3701845c5dba088f858f3f438f57
Author: Rene Engelhard <rene at rene-engelhard.de>
Date:   Mon Dec 11 19:47:35 2017 +0100

    allow file_mmap in xpdfimport profile; finally makes it work
---
 changelog                   |  2 ++
 patches/apparmor-fixes.diff | 29 +++++++++++++++++++++++++++++
 patches/series              |  1 +
 3 files changed, 32 insertions(+)

diff --git a/changelog b/changelog
index 57b6eeb..3aa72e3 100644
--- a/changelog
+++ b/changelog
@@ -9,6 +9,8 @@ libreoffice (1:5.4.4~rc1-1) UNRELEASED; urgency=medium
   * debian/patches/apparmor-usrmerge.diff: allow also /usr/bin/dash (etc.)
     - usrmerge...
   * debian/patches/apparmor-updates.diff: updates to the apparmor profiles
+    (allow /usr/bin/gpgconf)
+  * debian/patches/apparmor-fixes.diff: fixes to the apparmor profiles...
 
   * debian/libreoffice-common.{triggers,postinst}.in,
     debian/shell-lib-lool.sh: add trigger updating LOOLs systemplate
diff --git a/patches/apparmor-fixes.diff b/patches/apparmor-fixes.diff
new file mode 100644
index 0000000..6b7f154
--- /dev/null
+++ b/patches/apparmor-fixes.diff
@@ -0,0 +1,29 @@
+From 48ff651c521a07e50870f39a9ab5f4cc2ad76d03 Mon Sep 17 00:00:00 2001
+From: Rene Engelhard <rene at debian.org>
+Date: Mon, 11 Dec 2017 19:41:12 +0100
+Subject: [PATCH] apparmor: copy xpdfimport definition into xpdfimport and
+ allow "m"
+
+Dec 11 18:46:11 sid kernel: [  176.085106] audit: type=1400 audit(1513014371.237:22): apparmor="DENIED" operation="file_mmap" profile="libreoffice-xpdfimport" name="/usr/lib/libreoffice/program/xpdfimport" pid=1511 comm="xpdfimport" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
+
+Change-Id: I31ddb412d1dd95506a00d22739a33d2e6770ba23
+---
+ sysui/desktop/apparmor/program.xpdfimport | 2 ++
+ 1 file changed, 2 insertions(+)
+
+diff --git a/sysui/desktop/apparmor/program.xpdfimport b/sysui/desktop/apparmor/program.xpdfimport
+index 3934c0a04006..aa76e85505fe 100644
+--- a/sysui/desktop/apparmor/program.xpdfimport
++++ b/sysui/desktop/apparmor/program.xpdfimport
+@@ -22,6 +22,8 @@ profile libreoffice-xpdfimport INSTDIR-program/xpdfimport {
+   /usr/share/libreoffice/share/config/* r,
+   owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
+ 
++  INSTDIR-program/xpdfimport        pxm,
++
+   #Uncomment for build testing (should be one directory <- of instdir)
+   #/mnt/store/git/libo/**    r,
+ }
+-- 
+2.11.0
+
diff --git a/patches/series b/patches/series
index 921c669..d80debf 100644
--- a/patches/series
+++ b/patches/series
@@ -40,3 +40,4 @@ icu-60.diff
 apparmor-complain.diff
 apparmor-usrmerge.diff
 apparmor-updates.diff
+apparmor-fixes.diff

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-openoffice/libreoffice.git