diff options
| author | Vincas Dargis <vindrg@gmail.com> | 2018-08-14 21:34:59 +0300 |
|---|---|---|
| committer | Caolán McNamara <caolanm@redhat.com> | 2018-08-28 17:07:33 +0200 |
| commit | 03fe0c36fccc7f2a9d0962dd8ed3d731c9f0d408 (patch) | |
| tree | 8a415ba6e030f9ad388052f4bb4d3f188ceef1ff /sysui | |
| parent | 55b3854b663dfd8ef47f1dddd03fd3849804243d (diff) | |
apparmor: fix printing to file
AppArmor denies writing to .ps files and dealing with temporaries needed
for "Print to file" functionality. Add .ps to the allowed extensions
list, also giving access to rm executable together with writing
printing-related temporary file.
Change-Id: I415e1401878bff6459f42162d4e8b517261b9cec
Reviewed-on: https://gerrit.libreoffice.org/59114
Tested-by: Jenkins
Reviewed-by: Rene Engelhard <rene@debian.org>
(cherry picked from commit 136077b40cdabab83aec6833bf3895d4305d30a3)
Reviewed-on: https://gerrit.libreoffice.org/59662
Reviewed-by: Vincas Dargis <vindrg@gmail.com>
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Tested-by: Caolán McNamara <caolanm@redhat.com>
Diffstat (limited to 'sysui')
| -rw-r--r-- | sysui/desktop/apparmor/program.soffice.bin | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin index 82525d6cde7d..6e328c8f4c5c 100644 --- a/sysui/desktop/apparmor/program.soffice.bin +++ b/sysui/desktop/apparmor/program.soffice.bin @@ -37,6 +37,8 @@ @{libreoffice_ext} += {,x,X}[hH][tT][mM]{,l,L} #.epub @{libreoffice_ext} += [eE][pP][uU][bB] +#.ps (printing to file) +@{libreoffice_ext} += [pP][sS] #Images @{libreoffice_ext} += [jJ][pP][gG] @@ -113,6 +115,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { owner @{HOME}/.cache/fontconfig/** rw, owner @{HOME}/.config/gtk-???/bookmarks r, #Make bookmarks work owner @{HOME}/.recently-used rwk, + owner /tmp/psp[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]* rw, #/tmp/psp1534203998 (printing to file) owner /{,var/}run/user/*/dconf/user rw, owner @{HOME}/.config/dconf/user r, @@ -127,6 +130,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin { /{usr/,}bin/sh rmix, /{usr/,}bin/bash rmix, /{usr/,}bin/dash rmix, + /{usr/,}bin/rm rmix, #deleting /tmp/psp1534203998 (printing to file) /usr/bin/bluetooth-sendto rmPUx, /usr/bin/lpr rmPUx, /usr/bin/paperconf rmix, |