Package: libreoffice-common
Version: 1:7.0.4-3
Severity: important
File: /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin
Usertags: apparmor
Tags: patch
When I open a document in my home directory in libreoffice I get this:
Feb 08 08:08:48 audit[474619]: AVC apparmor="DENIED" operation="open" profile="libreoffice-soffice" name="/home/pabs/lu474619vthyvt.tmp" pid=474619 comm="soffice.bin" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
The reason is that this rule allowing temporary files is too short:
owner @{libo_user_dirs}/{,**/}lu??????????{,?}.tmp rwk, #Temporary file used when saving
Adding one more possible temporary filename length fixes the denial:
owner @{libo_user_dirs}/{,**/}lu??????????{,?,??}.tmp rwk, #Temporary file used when saving
I expect that just switching to a wildcard would work too and would be
much more likely to continue working if LibreOffice update the length.
owner @{libo_user_dirs}/{,**/}lu??????????*.tmp rwk, #Temporary file used when saving
-- Package-specific info:
-- System Information:
Debian Release: bullseye/sid
APT prefers testing-debug
APT policy: (900, 'testing-debug'), (900, 'testing'), (800, 'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700, 'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-3-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libreoffice-common depends on:
ii libnumbertext-data 1.0.7-1
ii libreoffice-style-colibre 1:7.0.4-3
ii ucf 3.0043
ii ure 1:7.0.4-3
Versions of packages libreoffice-common recommends:
ii apparmor 2.13.6-7
pn fonts-liberation2 | ttf-mscorefonts-installer <none>
ii libexttextcat-data 3.4.5-1
ii python3-uno 1:7.0.4-3
ii xdg-utils 1.1.3-2
Versions of packages libreoffice-common suggests:
ii libreoffice-style-colibre [libreoffice-style] 1:7.0.4-3
Versions of packages python3-uno depends on:
ii libc6 2.31-9
ii libgcc-s1 10.2.1-6
ii libpython3.9 3.9.1-3
ii libreoffice-core 1:7.0.4-3
ii libstdc++6 10.2.1-6
ii libuno-cppu3 1:7.0.4-3
ii libuno-cppuhelpergcc3-3 1:7.0.4-3
ii libuno-sal3 1:7.0.4-3
ii libuno-salhelpergcc3-3 1:7.0.4-3
ii python3 3.9.1-1
ii python3.9 3.9.1-3
ii ucf 3.0043
ii uno-libs-private 1:7.0.4-3
-- no debconf information
--
bye,
pabs
https://wiki.debian.org/PaulWise
Attachment:
signature.asc
Description: This is a digitally signed message part