https://bugs.documentfoundation.org/show_bug.cgi?id=114915
Bug ID: 114915
Summary: Apparmor profiles contain invalid comments in variable
assignments
Product: LibreOffice
Version: 5.4.3.2 release
Hardware: All
OS: Linux (All)
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: LibreOffice
Assignee: [email protected]
Reporter: [email protected]
Description:
(originally reported as https://launchpad.net/bugs/1741581)
Nibaldo González has reported that the LibreOffice AppArmor profile has
mistakes in it:
https://lists.ubuntu.com/archives/apparmor/2018-January/011418.html
> In this case, AppArmor grants write and read permissions to files with
> extension: '.#.txt', '.#All', '.the', '.format', '.#.xml', '.and',
> etc. Clearly, the profile must be fixed.
>From a quick look at all the profiles, only program.soffice.bin appears to be
affected.
Steps to Reproduce:
see downstream bug report: https://launchpad.net/bugs/1741581
Actual Results:
The apparmor profile allows access to unexpected files, such as *.the and *.and
under $HOME.
Expected Results:
The apparmor profile should not allow access to files named *.the or *.and
under $HOME.
Reproducible: Always
User Profile Reset: No
Additional Info:
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like
Gecko) Chrome/63.0.3239.40 Safari/537.36
--
You are receiving this mail because:
You are the assignee for the bug._______________________________________________
Libreoffice-bugs mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
