Bug#955271: libreoffice-common: AppArmor profile blocks gpg's tofu.db, causes hang opening Options
Package: libreoffice-common
Version: 1:6.4.1-1
Severity: minor
User: pkg-apparmor-team@lists.alioth.debian.org
Usertags: buggy-profile
Control: affects -1 gpg
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
The AppArmor profile doesn't allow reading GnuPG's tofu.db:
apparmor="DENIED" operation="file_lock" profile="libreoffice-soffice//gpg" name="/home/john/.gnupg/tofu.db" pid=94210 comm="gpg" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000
This does have a material impact. Opening Tools -> Options makes LibreOffice
and GnuPG hang indefinitely. The latter excessively uses the CPU, but
LibreOffice resumes when it is killed.
This is observed in 1:6.4.2-2 also. It's probably dependent on me using the
tofu trust model, and I'm not sure whether it would affect someone not having
this setting. Specifically, I have in my ~/.gnupg/gpg.conf
trust-model tofu+pgp
and hopefully this is sufficient to reproduce the issue.
- -- System Information:
Debian Release: bullseye/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (2, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.4.0-4-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libreoffice-common depends on:
ii libnumbertext-data 1.0.5-3
ii libreoffice-style-colibre 1:6.4.2-2
ii libreoffice-style-tango 1:6.4.2-2
ii ure 1:6.4.2-2
Versions of packages libreoffice-common recommends:
ii apparmor 2.13.3-7
ii fonts-liberation2 2.1.0-1
ii libexttextcat-data 3.4.5-1
ii python3-uno 1:6.4.2-2
ii xdg-utils 1.1.3-2
Versions of packages libreoffice-common suggests:
ii libreoffice-style-breeze [libreoffice-style] 1:6.4.2-2
ii libreoffice-style-colibre [libreoffice-style] 1:6.4.2-2
ii libreoffice-style-tango [libreoffice-style] 1:6.4.2-2
Versions of packages python3-uno depends on:
ii libc6 2.30-2
ii libgcc-s1 10-20200324-1
ii libpython3.8 3.8.2-1
ii libreoffice-core 1:6.4.2-2
ii libstdc++6 10-20200324-1
ii libuno-cppu3 1:6.4.2-2
ii libuno-cppuhelpergcc3-3 1:6.4.2-2
ii libuno-sal3 1:6.4.2-2
ii libuno-salhelpergcc3-3 1:6.4.2-2
ii python3 3.8.2-2
ii python3.8 3.8.2-1
ii uno-libs-private 1:6.4.2-2
ii ure 1:6.4.2-2
- -- Configuration Files:
/etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin changed [not included]
* I had set it to complain mode
- -- no debconf information
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQT287WtmxUhmhucNnhyvHFIwKstpwUCXoACrQAKCRByvHFIwKst
p3MSAP0cz2FiDMFiCC4wbSnsvYZCqLDf81/dSPc1vWkiHqOVbwEAysYhder368UF
z1E6TeePMY9k2bb/tL3RUy+ftbyrEwU=
=Lg5N
-----END PGP SIGNATURE-----
Reply to: