Bug#905442: AppArmor: cannot save files in enforced mode

[Vincas Dargis <vindrg@gmail.com>]

Package: libreoffice-common
Version: 1:6.1.0~rc2-3
Severity: normal
Tags: upstream

Dear Maintainer,

I cannot save files when AppArmor profile is in enforce mode:

```
type=AVC msg=audit(1533396515.983:974): apparmor="DENIED"
operation="mknod" profile="libreoffice-soffice"
name="/home/vincas/lu27901fkol0k.tmp" pid=27901 comm="soffice.bin"
requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
```

Looks like these temp files always starts with "lu", and being
(attempted) saved in the same directory where file should be saved. They
appear to have fixed file name length (both Writer and Calc):

```
# grep -h -o  -P "[[:alnum:]]+\.tmp" /var/log/audit/audit.log*
lu27901fkol0k.tmp
lu27901fkol0l.tmp
lu27901fkol0m.tmp
lu28293fl6uko.tmp
lu30817780q83.tmp
lu116044dmon0.tmp
lu116044dmon3.tmp
lu116044dmon6.tmp
lu116044dmon9.tmp
```

So `...something.../lu???????????.tmp rw` rule would fix that (eleven
changing possitions)

I'll try to propose fix in upstream gerrit.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.17.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=lt_LT.UTF-8, LC_CTYPE=lt_LT.UTF-8 (charmap=UTF-8), LANGUAGE=lt (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libreoffice-common depends on:
ii  libnumbertext-data       1.0-2
ii  libreoffice-style-tango  1:6.1.0~rc2-3
ii  ure                      6.1.0~rc2-3

Versions of packages libreoffice-common recommends:
ii  fonts-liberation2   2.00.1-7
ii  libexttextcat-data  3.4.5-1
ii  python3-uno         1:6.1.0~rc2-3
ii  xdg-utils           1.1.3-1

Versions of packages libreoffice-common suggests:
ii  libreoffice-style-tango [libreoffice-style]  1:6.1.0~rc2-3

Versions of packages python3-uno depends on:
ii  libc6             2.27-5
ii  libgcc1           1:8.2.0-3
ii  libpython3.6      3.6.6-1
ii  libreoffice-core  1:6.1.0~rc2-3
ii  libstdc++6        8.2.0-3
ii  python3           3.6.6-1
ii  python3.6         3.6.6-1
ii  uno-libs3         6.1.0~rc2-3
ii  ure               6.1.0~rc2-3

-- Configuration Files:
/etc/apparmor.d/usr.lib.libreoffice.program.oosplash changed [not included]
/etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin changed [not included]

-- no debconf information