[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#955271: marked as done (libreoffice-common: AppArmor profile blocks gpg's tofu.db, causes hang opening Options)

Your message dated Sat, 01 May 2021 13:50:38 +0000
with message-id <E1lcq10-0002hm-4F@fasolo.debian.org>
and subject line Bug#955271: fixed in libreoffice 1:7.1.3~rc2-1
has caused the Debian Bug report #955271,
regarding libreoffice-common: AppArmor profile blocks gpg's tofu.db, causes hang opening Options
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
955271: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=955271
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libreoffice-common
Version: 1:6.4.1-1
Severity: minor
User: pkg-apparmor-team@lists.alioth.debian.org
Usertags: buggy-profile
Control: affects -1 gpg

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The AppArmor profile doesn't allow reading GnuPG's tofu.db:
apparmor="DENIED" operation="file_lock" profile="libreoffice-soffice//gpg" name="/home/john/.gnupg/tofu.db" pid=94210 comm="gpg" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000

This does have a material impact. Opening Tools -> Options makes LibreOffice
and GnuPG hang indefinitely. The latter excessively uses the CPU, but
LibreOffice resumes when it is killed.

This is observed in 1:6.4.2-2 also. It's probably dependent on me using the
tofu trust model, and I'm not sure whether it would affect someone not having
this setting. Specifically, I have in my ~/.gnupg/gpg.conf
  trust-model tofu+pgp
and hopefully this is sufficient to reproduce the issue.

- -- System Information:
Debian Release: bullseye/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (2, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.4.0-4-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libreoffice-common depends on:
ii  libnumbertext-data         1.0.5-3
ii  libreoffice-style-colibre  1:6.4.2-2
ii  libreoffice-style-tango    1:6.4.2-2
ii  ure                        1:6.4.2-2

Versions of packages libreoffice-common recommends:
ii  apparmor            2.13.3-7
ii  fonts-liberation2   2.1.0-1
ii  libexttextcat-data  3.4.5-1
ii  python3-uno         1:6.4.2-2
ii  xdg-utils           1.1.3-2

Versions of packages libreoffice-common suggests:
ii  libreoffice-style-breeze [libreoffice-style]   1:6.4.2-2
ii  libreoffice-style-colibre [libreoffice-style]  1:6.4.2-2
ii  libreoffice-style-tango [libreoffice-style]    1:6.4.2-2

Versions of packages python3-uno depends on:
ii  libc6                    2.30-2
ii  libgcc-s1                10-20200324-1
ii  libpython3.8             3.8.2-1
ii  libreoffice-core         1:6.4.2-2
ii  libstdc++6               10-20200324-1
ii  libuno-cppu3             1:6.4.2-2
ii  libuno-cppuhelpergcc3-3  1:6.4.2-2
ii  libuno-sal3              1:6.4.2-2
ii  libuno-salhelpergcc3-3   1:6.4.2-2
ii  python3                  3.8.2-2
ii  python3.8                3.8.2-1
ii  uno-libs-private         1:6.4.2-2
ii  ure                      1:6.4.2-2

- -- Configuration Files:
/etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin changed [not included]
 * I had set it to complain mode

- -- no debconf information

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQT287WtmxUhmhucNnhyvHFIwKstpwUCXoACrQAKCRByvHFIwKst
p3MSAP0cz2FiDMFiCC4wbSnsvYZCqLDf81/dSPc1vWkiHqOVbwEAysYhder368UF
z1E6TeePMY9k2bb/tL3RUy+ftbyrEwU=
=Lg5N
-----END PGP SIGNATURE-----

--- End Message ---
--- Begin Message --- 
Source: libreoffice
Source-Version: 1:7.1.3~rc2-1
Done: Rene Engelhard <rene@debian.org>

We believe that the bug you reported is fixed in the latest version of
libreoffice, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 955271@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Rene Engelhard <rene@debian.org> (supplier of updated libreoffice package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 01 May 2021 13:50:02 +0200
Source: libreoffice
Architecture: source
Version: 1:7.1.3~rc2-1
Distribution: experimental
Urgency: medium
Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Changed-By: Rene Engelhard <rene@debian.org>
Closes: 955271 985297
Changes:
 libreoffice (1:7.1.3~rc2-1) experimental; urgency=medium
 .
   * New upstream snapshot
 .
   * debian/patches/apparmor-gnupg-tofu.diff: apply patch to support tofu+pgp in
     apparmor profile (closes: #955271)
   * debian/control.in, debian/libreoffice-common.{maintscript,postinst.in}:
     apply patch from Adreas Beckmann to fix upgrade buster->bullseye
     - libreoffice-core: Copy some Conflicts from libreoffice-common for smoother
       upgrades from buster. Dpkg will otherwise ignore Conflicts that are
       encountered later against a package that is already deconfigured.
     - libreoffice-common: Do not use dir_to_symlink for
       /usr/lib/libreoffice/share/registry, the Breaks/Conflicts cascade does not
       work reliable here to ensure all packages previously shipping files there
       are either removed or upgraded first, but not just deconfigured. Fix up
       the symlink in postinst instead.  (Closes: #985297)
Checksums-Sha1:
 4920aa4df745300ae4a88c1eacc6b1a2e0a78061 30702 libreoffice_7.1.3~rc2-1.dsc
 6ef9600df3448d436485e205e9b628c39a793a12 111105036 libreoffice_7.1.3~rc2.orig-helpcontent2.tar.xz
 8f196853770eebc1ca819de453811a8b7614a15a 186011120 libreoffice_7.1.3~rc2.orig-translations.tar.xz
 5ed9e664347f8065047437e93fe79ab501e2995d 244104432 libreoffice_7.1.3~rc2.orig.tar.xz
 505a59f45f3c0afa54449dab465422bea8fbe34f 833 libreoffice_7.1.3~rc2.orig.tar.xz.asc
 a4885055e60f18ef60c32243bef85505ec67d0a9 21514812 libreoffice_7.1.3~rc2-1.debian.tar.xz
 527f350604743e18d83e655262db379dfc33713e 33350 libreoffice_7.1.3~rc2-1_source.buildinfo
Checksums-Sha256:
 efbab5f446ab5e996bf6ebb0d3eacfeb978a65b4eb8e231ff3e3e1673a478832 30702 libreoffice_7.1.3~rc2-1.dsc
 c6a2664f0226bc44d0f31fb2ec274c09f47dddf6b6cc4ec3e3e2cdad3e9ffbdd 111105036 libreoffice_7.1.3~rc2.orig-helpcontent2.tar.xz
 48f3a5e94573486b75125ac74b004e7becee067271fe8db7caecb005c1584fe6 186011120 libreoffice_7.1.3~rc2.orig-translations.tar.xz
 35af7fd104b253704f770a205f835aee0e82ccc889ebf0949a89d9b3276229bf 244104432 libreoffice_7.1.3~rc2.orig.tar.xz
 328c1e6059d9a31ab9e0e4f3fc13cc9c5e03f2f791bb2340befa8538baad9ff9 833 libreoffice_7.1.3~rc2.orig.tar.xz.asc
 54a4ce7e8111a992d0723ad2a0f483c74db8b6142730280b59305f242e7a7190 21514812 libreoffice_7.1.3~rc2-1.debian.tar.xz
 932891069fec369da726c48e9ae1f2db038123b6122ba122eb552c37f4fc0a5e 33350 libreoffice_7.1.3~rc2-1_source.buildinfo
Files:
 f54992369f89c11db7eec20ee824bb80 30702 editors optional libreoffice_7.1.3~rc2-1.dsc
 b636560b9a277674a46dfb84e1eb59d4 111105036 editors optional libreoffice_7.1.3~rc2.orig-helpcontent2.tar.xz
 3c1d86a6b00b46f9fbc89ea5ed558e76 186011120 editors optional libreoffice_7.1.3~rc2.orig-translations.tar.xz
 a7a47fe3a5f03fecd0616d071eedb75b 244104432 editors optional libreoffice_7.1.3~rc2.orig.tar.xz
 03716ce9fef8730ba18071a0eae82aae 833 editors optional libreoffice_7.1.3~rc2.orig.tar.xz.asc
 bfbd07731dd475925ed26339f13821f0 21514812 editors optional libreoffice_7.1.3~rc2-1.debian.tar.xz
 c917b79aa91e4c176de0d76bdcccef34 33350 editors optional libreoffice_7.1.3~rc2-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJEBAEBCgAuFiEE4S3qRnUGcM+pYIAdCqBFcdA+PnAFAmCNTuoQHHJlbmVAZGVi
aWFuLm9yZwAKCRAKoEVx0D4+cJiGD/4rnwwpSMXorxL0KtcsFOvE3tnKkpGaFeTA
OwwexDFCEePC5L23oyiDyQnSI3j6I/JJlsiABLy+7T9oaTtrTzZEuPyuzWvsCOBd
lsO1fhz51UvK0CeIkRreNewwmiFecSw9xdRE14jHIeRpdUxbjWJQ6oVxQkK9eOoo
DE/bsx1owIeUxEoD2YaV7fQ5YyNyEvtFwcb4QFKAXAn4Iyf2g9a2Kq2kACvqKSv0
Q+7zIABwg8cgpQ8rrBCCbOx+Gf7BGwfFTrv4fYtpdAiVp+PaY3IWeooXvyXt7vNC
4orYUQ9J6EbS7muuiIbYMnWpz4xMOacO8UID+MX7GJx4jUsfhqrPRgmcGvJTEdUg
3vQQqHy0U6ksIs9pTZYyl0TwrAA/j1y4nyJJScUBFS8WNs/+H/HpUO7p9JNnXEGQ
ueRZ0cQtR81gvh+p7/o35EV2DsXnxgiFMmXrcW/fpdPBuvCINTfJn/4SlRqVXftC
sePzYSXhNqH89SL8W39QUZ8ZhHWw1MASNq1Vq89Du2NU8wTf1Bhl6Q0kB3nGarFH
bRl5fMwWMNDxmJhlz8Mmye/31VtSG1QgNDAEzauHwWgDZdgRLK3vBzXj2uVozlWv
suEOIurm6w7TsPUFkPSuDADYAB2gWmMRAQLQRLqzDffM56uDJ3PPLg+zdyw4IUPK
DPxGzfoBtA==
=7R2w
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: