Bug#887593: More apparmor="ALLOWED" messages in syslog.

[Rene Engelhard <rene@debian.org>]

On Fri, Feb 16, 2018 at 07:08:15PM +0100, Rene Engelhard wrote:
> > Feb 15 17:42:26 foo-machine kernel: [85563.650059] audit: type=1400
> > audit(1518741746.405:442): apparmor="ALLOWED" operation="open"
> > profile="libreoffice-soffice"
> > name="/home/tevaugha/.mozilla/firefox/giv84ecf.default/cert9.db"
> > pid=11946 comm="soffice.bin" requested_mask="wrc" denied_mask="wrc"
> > fsuid=1000 ouid=1000
> > Feb 15 17:42:26 foo-machine kernel: [85563.650122] audit: type=1400
> > audit(1518741746.405:443): apparmor="ALLOWED" operation="file_lock"
> > profile="libreoffice-soffice"
> > name="/home/tevaugha/.mozilla/firefox/giv84ecf.default/cert9.db"
> > pid=11946 comm="soffice.bin" requested_mask="k" denied_mask="k"
> > fsuid=1000 ouid=1000
> > Feb 15 17:42:26 foo-machine kernel: [85563.650551] audit: type=1400
> > audit(1518741746.405:444): apparmor="ALLOWED" operation="open"
> > profile="libreoffice-soffice"
> > name="/home/tevaugha/.mozilla/firefox/giv84ecf.default/key4.db"
> > pid=11946 comm="soffice.bin" requested_mask="wrc" denied_mask="wrc"
> > fsuid=1000 ouid=1000
> > Feb 15 17:42:26 foo-machine kernel: [85563.650599] audit: type=1400
> > audit(1518741746.405:445): apparmor="ALLOWED" operation="file_lock"
> > profile="libreoffice-soffice"
> > name="/home/tevaugha/.mozilla/firefox/giv84ecf.default/key4.db"
> > pid=11946 comm="soffice.bin" requested_mask="k" denied_mask="k"
> > fsuid=1000 ouid=1000
> 
> Hrmpf. more mozilla stuff.

That said

  owner @{HOME}/.mozilla/firefox/profiles.ini r,
  owner @{HOME}/.mozilla/firefox/*/secmod.db r,
   owner @{HOME}/.mozilla/firefox/*/cert8.db r,

sufficed for me to make the Digital Signing dialogue not complain
(see upstream commit
https://cgit.freedesktop.org/libreoffice/core/commit/?id=b6176bde1dc267601839d0d6510beaa07a28d8fa)

Regards,
 
Rene