Bug#920833: apparmor: AppArmor denies access to mime-specifc files for various GUI applications

2019-02-11 Thread Vincas Dargis
Changing this rule [0]: @{user_share_dirs} = @{HOME}/.local/{,share/@{flatpak_exports_root}}/share Into these two: @{user_share_dirs} = @{HOME}/.local/share @{user_share_dirs} += @{HOME}/.local/share/@{flatpak_exports_root}/share Makes logs happy again. Not sure if flatpak-stuff is OK

Bug#920833: apparmor: AppArmor denies access to mime-specifc files for various GUI applications

2019-02-11 Thread Vincas Dargis
Something strange is going on. Check this output: ``` $ /usr/sbin/apparmor_parser -Q -p /etc/apparmor.d/usr.bin.thunderbird | fgrep user_share @{user_share_dirs} = @{HOME}/.local/{,share/@{flatpak_exports_root}}/share owner @{user_share_dirs}/applications/{**,} r, owner

Bug#920833: [pkg-apparmor] Bug#920833: apparmor: AppArmor denies access to mime-specifc files for various GUI applications

2019-02-10 Thread Vincas Dargis
Someone has reproduces same issue with Thunerbird: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921888#10

Bug#920833: [pkg-apparmor] Bug#920833: apparmor: AppArmor denies access to mime-specifc files for various GUI applications

2019-01-31 Thread Vincas Dargis
On 2019-01-31 11:24, intrigeri wrote:> I can't reproduce this. I can't reproduce this on my Sid Gnome/KDE VM's too :/ I see that you have modified a few tunables files locally. I wonder if this affects how @{user_share_dirs} is used. Can you please retry with a pristine config? I've cleaned

Bug#920833: [pkg-apparmor] Bug#920833: apparmor: AppArmor denies access to mime-specifc files for various GUI applications

2019-01-31 Thread intrigeri
Control: tag -1 + moreinfo > After recent updates on Sid, multiple GUI applications (like > Thunderbird, Firefox, qTox) on KDE are hit by these kind of denies: > ``` > type=AVC msg=audit(1548784946.545:1896): apparmor="DENIED" > operation="open" profile="thunderbird" >

Bug#920833: apparmor: AppArmor denies access to mime-specifc files for various GUI applications

2019-01-29 Thread Vincas Dargis
Package: apparmor Version: 2.13.2-6 Severity: minor Tags: upstream Dear Maintainer, After recent updates on Sid, multiple GUI applications (like Thunderbird, Firefox, qTox) on KDE are hit by these kind of denies: ``` type=AVC msg=audit(1548784946.545:1896): apparmor="DENIED" operation="open"