summaryrefslogtreecommitdiff
path: root/sysui
diff options
context:
space:
mode:
authorVincas Dargis <vindrg@gmail.com>2018-01-21 16:16:43 +0200
committerThorsten Behrens <Thorsten.Behrens@CIB.de>2018-01-23 09:44:10 +0100
commit88704209e5e97230af626732a657a720fee516af (patch)
tree69d3373bc10ef99a648f7fdd2358d4b5335eebff /sysui
parentc75166942832c75ca7ab540dc4636ee0b18080cd (diff)
deb#887593 apparmor: allow reading device information
* Add file read rule for paths like /sys/devices/virtual/block/dm-0/queue/rotational used by isRotational() in desktop/unx/source/pagenin.c. * Add file read rule for paths like /sys/dev/char/226:128/device/uevent used by libdrm. Change-Id: Ic41365b478c817b6766e25adadd6761fa03ff055 Reviewed-on: https://gerrit.libreoffice.org/48265 Tested-by: Rene Engelhard <rene@debian.org> Reviewed-by: Rene Engelhard <rene@debian.org> Tested-by: Jenkins <ci@libreoffice.org> Reviewed-on: https://gerrit.libreoffice.org/48278 Reviewed-by: Thorsten Behrens <Thorsten.Behrens@CIB.de>
Diffstat (limited to 'sysui')
-rw-r--r--sysui/desktop/apparmor/program.oosplash1
-rw-r--r--sysui/desktop/apparmor/program.soffice.bin1
2 files changed, 2 insertions, 0 deletions
diff --git a/sysui/desktop/apparmor/program.oosplash b/sysui/desktop/apparmor/program.oosplash
index e044c1afce26..bcc06914d112 100644
--- a/sysui/desktop/apparmor/program.oosplash
+++ b/sysui/desktop/apparmor/program.oosplash
@@ -23,6 +23,7 @@ profile libreoffice-oopslash INSTDIR-program/oosplash {
/etc/passwd r,
/etc/nsswitch.conf r,
/run/nscd/passwd r,
+ /sys/devices/{virtual,pci[0-9]*}/**/queue/rotational r, # for isRotational() in desktop/unx/source/pagein.c
/usr/lib{,32,64}/ure/bin/javaldx rmpux,
/usr/share/libreoffice/program/* r,
INSTDIR-program/** r,
diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin
index 93fc7ee537e6..44cb61be97ec 100644
--- a/sysui/desktop/apparmor/program.soffice.bin
+++ b/sysui/desktop/apparmor/program.soffice.bin
@@ -160,6 +160,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin {
#Likely moving to abstractions in the future
owner @{HOME}/.icons/*/cursors/* r,
+ /sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r, # for libdrm
/usr/share/*-fonts/conf.avail/*.conf r,
/usr/share/fonts-config/conf.avail/*.conf r,