** Changed in: apparmor
Status: Fix Committed => Fix Released
** Changed in: apparmor/2.10
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
** Branch linked: lp:apparmor/2.10
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents opening docs from other apps under
** Changed in: apparmor/2.10
Milestone: None => 2.10.2
** Changed in: apparmor/2.10
Status: New => Fix Committed
** Changed in: apparmor
Status: New => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is
** Also affects: apparmor/2.10
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile
Cherry-picked in Debian's Vcs-Bzr, will be part of the apparmor
2.10.95-7 upload. Thanks everybody!
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
** Changed in: apparmor
Milestone: None => 2.11
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents opening docs from
** Branch linked: lp:apparmor
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents opening docs from other apps under
Thanks Simon,
Committed revision 3590.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents opening docs from other apps
There is now an , which is #include'd by
. It includes weston-shared, but not the Wayland
socket itself.
I suspect a better rule for that would be:
owner /run/user/*/wayland-[0-9]* rw,
so that the numbered sockets that are conventionally used are matched
more precisely.
The complete set of
** Changed in: apparmor (Ubuntu)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents
I'm skipping this change for the 2.11 release because the correct
solution is still being discussed between Christian and Jamie.
** Tags added: aa-policy
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
I suggest adding a wayland abstraction to apparmor like we currently
have for X and mir. Then the evince profile would use '#include
'.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
I'm opposed to this for upstream because X != wayland != mir and it is
perfectly reasonable for a policy author to not want X when using mir or
wayland, for example. I think it would be better to add mir and wayland
to the kde and gnome abstractions instead. These already include X so it
makes
While I understand the reason to have a wayland abstraction (yes,
wayland != X), this probably also means we'll need to change all
profiles that include abstractions/X to also include the wayland
abstraction. That's also the reason why I proposed (ab)using
abstractions/X - that would mean we don't
/run/user/1000/wayland-0 doesn't sound like an Evince-specific thing.
Would it make sense to add it to the X abstraction instead? (restricting
it to "owner" probably makes sense)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed
I don't think it is Evince-specific either, but that was the only app
that I encountered having the issue. It's definitely not X related
however since this is Wayland-specific. The "wayland-0" socket naming
convention seems to come from libwayland-server, so maybe that's a
reasonable package to
** Package changed: evince (Ubuntu) => apparmor (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents opening docs
** Also affects: apparmor
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1507469
Title:
Evince's Apparmour profile prevents
18 matches
Mail list logo
