Hello,

The gnome abstraction has this rule to allow reading poppler cMap tables:
  /usr/share/poppler/cMap/** r,

poppler isn't only used by gnome/gtk applications.
For example Mumble, Quassel and Steam try to read these files.

Imho it would make sense to move the rule from gnome to the
fonts abstraction.
gnome includes fonts so there shouldn't be any regression.

Cheers,
Felix
=== modified file 'profiles/apparmor.d/abstractions/fonts'
--- profiles/apparmor.d/abstractions/fonts	2013-01-05 06:05:53 +0000
+++ profiles/apparmor.d/abstractions/fonts	2013-05-30 14:14:07 +0000
@@ -44,3 +44,6 @@
 
   /usr/local/share/fonts/               r,
   /usr/local/share/fonts/**             r,
+
+  # poppler CMap tables
+  /usr/share/poppler/cMap/**            r,

=== modified file 'profiles/apparmor.d/abstractions/gnome'
--- profiles/apparmor.d/abstractions/gnome	2013-01-05 06:05:53 +0000
+++ profiles/apparmor.d/abstractions/gnome	2013-05-30 14:13:53 +0000
@@ -83,6 +83,3 @@
   # mime-types
   /etc/gnome/defaults.list r,
   /usr/share/gnome/applications/mimeinfo.cache r,
-
-  # poppler CMap tables
-  /usr/share/poppler/cMap/** r,

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to