Bug#887593: libreoffice-common: apparmor profiles triggers lot of ALLOWED entries
severity 887593 minor
block 886548 by 887953
thanks
On Thu, Jan 18, 2018 at 11:29:19AM +0100, Félix Sipma wrote:
> I get a lot of warnings in my logs concerning libreoffice and apparmor. They
> appear as ALLOWED, but that would mean they would be DENIED if apparmor was
> enabled.
Which is the reason it's in complain mode :)
> Jan 18 11:09:25 laptop audit[21088]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" name="/run/user/1000/X11/Xauthority" pid=21088 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.099:85): apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" name="/run/user/1000/X11/Xauthority" pid=21088 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jan 18 11:09:25 laptop audit[21088]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" name="/sys/devices/virtual/block/dm-0/queue/rotational" pid=21088 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.107:86): apparmor="ALLOWED" operation="open" profile="libreoffice-oopslash" name="/sys/devices/virtual/block/dm-0/queue/rotational" pid=21088 comm="oosplash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:87): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:88): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:89): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:90): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.351:91): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.355:92): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.355:93): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop kernel: audit: type=1400 audit(1516270165.355:94): apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/uevent" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21106]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/sys/devices/pci0000:00/0000:00:02.0/subsystem_device" pid=21106 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:25 laptop audit[21105]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/home/gueux/.config/X11/XCompose" pid=21105 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
X stuff....
> Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/home/gueux/.mozilla/firefox/profiles.ini" pid=21105 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/home/gueux/.mozilla/firefox/g5to00w2.default-1471855693129/secmod.db" pid=21105 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/home/gueux/.mozilla/firefox/g5to00w2.default-1471855693129/cert8.db" pid=21105 comm="soffice.bin" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
> Jan 18 11:09:27 laptop audit[21105]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" name="/home/gueux/.mozilla/firefox/g5to00w2.default-1471855693129/key3.db" pid=21105 comm="soffice.bin" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
Here it gets interesting. That's for digital signing with X.509. The
certificates are supposed to come from mozilla...
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="exec" profile="libreoffice-soffice" name="/usr/bin/gpg" pid=21125 comm="soffice.bin" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="libreoffice-soffice//null-/usr/bin/gpg"
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_inherit" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/dev/null" pid=21125 comm="gpg" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/bin/gpg" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/ld-2.26.so" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/etc/ld.so.preload" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/etc/ld.so.cache" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libz.so.1.2.8" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libz.so.1.2.8" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libm-2.26.so" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libm-2.26.so" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libpthread-2.26.so" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libpthread-2.26.so" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libdl-2.26.so" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libdl-2.26.so" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21125 comm="gpg" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/usr/lib/locale/locale-archive" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/home/gueux/.gnupg/gpg.conf" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jan 18 11:09:27 laptop audit[21125]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpg" name="/etc/locale.alias" pid=21125 comm="gpg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="exec" profile="libreoffice-soffice" name="/usr/bin/gpgsm" pid=21127 comm="soffice.bin" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 target="libreoffice-soffice//null-/usr/bin/gpgsm"
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_inherit" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/dev/null" pid=21127 comm="gpgsm" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/bin/gpgsm" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
gpg and gpg list/stuff gpg uses for digital signing/encryption with
gpg... Did already add gpgconf when I saw that one in the logs, but...
I wasn't aware one needs to allow locale stuff here explicitely too...
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/ld-2.26.so" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/etc/ld.so.preload" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/etc/ld.so.cache" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
... or the linker ...
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libgcrypt.so.20.2.1" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
.. or openssl used by gpg ...
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libksba.so.8.11.6" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libksba.so.8.11.6" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libgpg-error.so.0.22.0" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libassuan.so.0.8.1" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libreadline.so.7.0" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libc-2.26.so" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="file_mmap" profile= libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/x86_64-linux-gnu/libtinfo.so.5.9" pid=21127 comm="gpgsm" requested_mask="rm" denied_mask="rm" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/usr/lib/locale/locale-archive" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
> Jan 18 11:09:27 laptop audit[21127]: AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice//null-/usr/bin/gpgsm" name="/etc/locale.alias" pid=21127 comm="gpgsm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
More gpg binaries/libs and locale stuff....
Regards,
Rene
Reply to: