intrigeri has proposed merging lp:~intrigeri/apparmor-profiles/totem-3.18.1
into lp:apparmor-profiles.
Requested reviews:
AppArmor Developers (apparmor-dev)
For more details, see:
https://code.launchpad.net/~intrigeri/apparmor-profiles/totem-3.18.1/+merge/281432
This fixes problems reported by Julian Andres Klode on
https://bugs.debian.org/808859, and a few other ones I could not ignore anymore
once I was at it :)
--
Your team AppArmor Developers is requested to review the proposed merge of
lp:~intrigeri/apparmor-profiles/totem-3.18.1 into lp:apparmor-profiles.
=== modified file 'ubuntu/16.04/abstractions/totem'
--- ubuntu/16.04/abstractions/totem 2015-10-27 01:49:53 +0000
+++ ubuntu/16.04/abstractions/totem 2015-12-30 20:25:02 +0000
@@ -28,8 +28,12 @@
/usr/share/** r,
/{media,mnt,opt,srv}/** r,
- /usr/lib/@{multiarch}/gstreamer[0-9].[0-9]/gstreamer-[0-9].[0-9]/gst-plugin-scanner Cix -> gst_plugin_scanner,
+ /usr/lib/@{multiarch}/gstreamer[0-9]*.[0-9]*/gstreamer-[0-9]*.[0-9]*/gst-plugin-scanner Cix -> gst_plugin_scanner,
owner @{HOME}/.cache/tracker/meta.db k,
owner @{HOME}/.cache/tracker/meta.db-shm k,
- owner @{HOME}/.local/share/grilo-plugins/*.db k,
+ owner @{HOME}/.local/share/grilo-plugins/*.db{,-shm} k,
+
+ owner @{PROC}/@{pid}/status r,
+
+ /sys/devices/system/node/*/meminfo r,
=== modified file 'ubuntu/16.04/usr.bin.totem'
--- ubuntu/16.04/usr.bin.totem 2015-11-13 19:05:05 +0000
+++ ubuntu/16.04/usr.bin.totem 2015-12-30 20:25:02 +0000
@@ -13,6 +13,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /usr/bin/totem-video-thumbnailer Pix,
/dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
@@ -23,4 +24,6 @@
owner /{,var/}run/user/*/dconf/user w,
owner /{,var/}run/user/*/at-spi2-*/ rw,
owner /{,var/}run/user/*/at-spi2-*/** rw,
+
+ /sys/devices/pci[0-9]*/**/config r,
}
=== modified file 'ubuntu/16.04/usr.bin.totem-previewers'
--- ubuntu/16.04/usr.bin.totem-previewers 2015-10-27 01:49:53 +0000
+++ ubuntu/16.04/usr.bin.totem-previewers 2015-12-30 20:25:02 +0000
@@ -14,6 +14,8 @@
# Not needed by nautilus, but maybe other applications
owner /**.[pP][nN][gG] w,
owner /**.[jJ][pP]{,[eE]}[gG] w,
+
+ /usr/bin/totem-video-thumbnailer r,
}
/usr/bin/totem-audio-preview {
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
