Bug#903900: libreoffice-common: missing AppArmor entries

[Rene Engelhard <rene@debian.org>]

severity 903900 wishlist
tag 903900 + moreinfo
thanks

Hi,

On Mon, Jul 16, 2018 at 12:42:30PM +0100, Nuno Oliveira wrote:
> Package: libreoffice-common
> Version: 1:6.0.6~rc1-1
> Severity: normal
> 
> The following seem to be required, to avoid AppArmor from complaining from file
> acess:
> 
> ### Extra:
> /dev/nvidia0 rw,
> /dev/nvidiactl rw,
> /dev/nvidia-modeset rw,

For what is this? Nvidias driver? nouveau?

> /etc/java-8-openjdk/security/java.security r,

Uuhm, use default-jdk (10).
But yeah, we probably should allow it

> owner /tmp/.gl* rwm,
> /proc/driver/nvidia/params r,

Again, nvidia.

> /proc/modules r,
> /sys/devices/system/memory/block_size_bytes r,

What for? Also for nvidia?

> /usr/share/nvidia/nvidia-application-profiles-* r,

Nvdia.

I've not added any specific driver allowance, and if this is for the proprietary
nvidia driver I am not going to do so.

If so, that basically leaves /etc/java-?-openjdk/security/java.security r,
- which again proves that you shouldn't mix various things in one report....

Regards,

Rene