Bug#882597: libreoffice: Failed to start when apparmor is running because of user rights
On Fri, Nov 24, 2017 at 02:33:20PM +0100, Michael Ott wrote:
> Package: libreoffice
> Version: 1:5.4.3-2
> Severity: important
>
> Dear Maintainer,
>
> start libreoffice with
> soffice -env:UserInstallation=file:///tmp/test
> always works
>
> start libreoffice with
> soffice -env:UserInstallation=file:///srv/home/michael/tmp/
> does not work. Home folder is srv/home/michael
Sigh. Feared something like this.
So you try to access stuff outside the LO profile?
>From the profile:
https://cgit.freedesktop.org/libreoffice/core/tree/sysui/desktop/apparmor/program.soffice.bin#n93:
owner @{HOME}/.config/libreoffice{,dev}/** rwk,
so no access outside its profile allowed if I read that right.
I'd guess that soffice -env:UserInstallation=file:///srv/home/michael would work?
The profile also says:
"# This profile should enable the average LibreOffice user to get their
# work done while blocking some advanced usage
# Namely not tested and likely not working : embedded plugins,
# Using the LibreOffice SDK and other development tasks"
> 1. Start system
> 2. Start libreoffice.
> -> cannot start because of to less user rights in config folder
> 3. Switch of apprmor with service apparmor teardown
Or aa-unconfined/-disable?
> 4. Start libreoffice
> -> works
> 5. Close libreoffice
> 6. Start apparmor
> 6. Start libreoffice
> -> works again
You mean _not_ after 6?. Otherwise this doesn't make sense?
>
> I hope that it helps
Unfortunately there seems no way to install a profile but keep it
"unconfined), only to just disable it.. Maybe I should keep it
installed but disabled...
> Debian Release: buster/sid
> APT prefers unstable
> APT policy: (700, 'unstable'), (650, 'testing'), (600, 'stable'), (500, 'stable-updates'), (500, 'experimental')
> Architecture: amd64 (x86_64)
> Foreign Architectures: i386
Not that it's related, but yeah, right, install everything from
experimental. Well, unstable has higher prio still but
you got java-common/default-jre etc and libc6 from there...
Regards,
Rene
Reply to: