Bug#882597: [pkg-apparmor] Bug#882597: libreoffice: Failed to start when apparmor is running because of user rights
- To: Rene Engelhard <rene@debian.org>
- Cc: 882597@bugs.debian.org, Debian AppArmor team <pkg-apparmor-team@lists.alioth.debian.org>, Michael Ott <kc.videri@gmail.com>
- Subject: Bug#882597: [pkg-apparmor] Bug#882597: libreoffice: Failed to start when apparmor is running because of user rights
- From: intrigeri <intrigeri@debian.org>
- Date: Thu, 07 Dec 2017 11:25:30 +0100
- Message-id: <[🔎] 85tvx2zvfp.fsf@boum.org>
- Reply-to: intrigeri <intrigeri@debian.org>, 882597@bugs.debian.org
- In-reply-to: <20171128103118.lodkzzgyn6vdzcyh@rene-engelhard.de> (Rene Engelhard's message of "Tue, 28 Nov 2017 11:31:18 +0100")
- References: <151153040033.9873.9114064846175597700.reportbug@king-coder13.king-coder> <151153040033.9873.9114064846175597700.reportbug@king-coder13.king-coder> <20171124221428.a26r5ptqtrz6l56i@rene-engelhard.de> <151153040033.9873.9114064846175597700.reportbug@king-coder13.king-coder> <85d142904m.fsf@boum.org> <20171128103118.lodkzzgyn6vdzcyh@rene-engelhard.de> <151153040033.9873.9114064846175597700.reportbug@king-coder13.king-coder>
Hi Rene,
(sorry for the delay, I was focusing on other issues that felt higher
priority than this one, since I've already workaround'ed the
problem successfully.)
Rene Engelhard:
>> that everyone else can't benefit from AppArmor security benefits
>> due to that, so I'm leaning towards:
>>
>> 1. keep the AppArmor profile enforced by default, so the vast
>> majority of users benefit from it;
>> 2. ensure the AppArmor profile supports customization and
>> affected users can learn how to tweak it; in this case,
>> I think adding in README.Debian "add your custom
>> env:UserInstallation to @{libo_user_dirs}" would be sufficient.
>>
>> What do you think? If you agree with my reasoning, then I could
>> provide a patch to implement the proposed change in README.Debian.
> Would be nice.
Great. I'll do this then :)
If you don't mind, once I have a patch I won't build a test package
locally: I suspect src:libreoffice takes a while to build, and my
changes should boil down to setting ENABLE_APPARMOR_PROFILES=y and
adding README.Debian that dh_installdocs should pick up automatically.
Cheers,
--
intrigeri
Reply to: