On 04/07/2015 04:51 PM, Steve Beattie wrote: > Bug: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1010909 > > When evince opens a dvi file, it updates the user fonts using > texlive commands in /usr/share/texlive/texmf-dist/web2c/ (or possibly > /usr/share/texlive/texmf/web2c/ in older releases). This patch adjusts > the sanitized_helper profile to allow these tools to run. > > Nominated for trunk and 2.9. > > Signed-off-by: Steve Beattie <[email protected]>
Acked-By: Jamie Strandboge <[email protected]> > --- > profiles/apparmor.d/abstractions/ubuntu-helpers | 3 +++ > 1 file changed, 3 insertions(+) > > Index: b/profiles/apparmor.d/abstractions/ubuntu-helpers > =================================================================== > --- a/profiles/apparmor.d/abstractions/ubuntu-helpers > +++ b/profiles/apparmor.d/abstractions/ubuntu-helpers > @@ -59,6 +59,9 @@ profile sanitized_helper { > # permissions for /usr/share, but for now just do this. (LP: #972367) > /usr/share/software-center/* Pixr, > > + # Allow exec of texlive font build scripts (LP: #1010909) > + /usr/share/texlive/texmf{,-dist}/web2c/{,**/}* Pixr, > + > # While the chromium and chrome sandboxes are setuid root, they only link > # in limited libraries so glibc's secure execution should be enough to not > # require the santized_helper (ie, LD_PRELOAD will only use standard system > > > -- Jamie Strandboge http://www.ubuntu.com/
signature.asc
Description: OpenPGP digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
