[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1090814: marked as done (libreoffice-common: AppArmor sometimes prevents file saving (/luXXXXXXX.tmp temporary files))

Your message dated Fri, 11 Apr 2025 15:15:46 +0000
with message-id <E1u3G6c-004fSb-Vw@fasolo.debian.org>
and subject line Bug#1090814: fixed in libreoffice 4:25.2.3~rc1-1
has caused the Debian Bug report #1090814,
regarding libreoffice-common: AppArmor sometimes prevents file saving (/luXXXXXXX.tmp temporary files)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1090814: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1090814
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libreoffice-common
Version: 4:7.4.7-1+deb12u5
Severity: normal
Tags: patch

Dear Maintainer,

Sometimes (but relatively rarely), with AppArmor profile enforced, user is
unable to save files in e.g. Libreoffice Calc with error:

"Error saving the document DOCUMENTNAME:
Write Error.
The file could not be written."

(where DOCUMENTNAME is name of actual document we've modifed and are trying to save)

Retrying does not help. 

At the same time, following errors are logged in dmesg(8):

apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/mnalis/Documents/Ostalo/lu2654yy7.tmp" pid=2654 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1001 ouid=1001
apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/mnalis/Documents/Ostalo/lu2654yy9.tmp" pid=2654 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1001 ouid=1001
apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/mnalis/Documents/Ostalo/lu2654yyb.tmp" pid=2654 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1001 ouid=1001

I've tracked it down to this line in /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin AppArmor profile:
owner @{libo_user_dirs}/{,**/}lu????????{,?,??,???,????}.tmp rwk, #Temporary file used when saving

which seems to expect that there are at least 8 characters between "lu" and ".tmp", and sometimes there are only 7.

Bug occurs on latest Bookwork (Stable), but same AppArmor line appears in latest Sid's 24.8.3-3 and experimental's 25.2.0~beta1-2 so I assume the same problem is also present there.

The attached diff fixes the issue for me.



-- Package-specific info:
Configuration file                            Package             Exists Changed
/etc/libreoffice/registry/Langpack-en-US.xcd  libreoffice-common  Yes     No
/etc/libreoffice/registry/lingucomponent.xcd  libreoffice-common  Yes     No
/etc/libreoffice/registry/main.xcd            libreoffice-common  Yes     No
/etc/libreoffice/registry/pdfimport.xcd       libreoffice-common  Yes     No
/etc/libreoffice/registry/res/fcfg_langpack_e libreoffice-common  Yes     No
/etc/libreoffice/registry/xsltfilter.xcd      libreoffice-common  Yes     No

-- System Information:
Debian Release: 12.8
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-28-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages libreoffice-common depends on:
ii  libnumbertext-data         1.0.11-1
ii  libreoffice-style-colibre  4:7.4.7-1+deb12u5
ii  ucf                        3.0043+nmu1
ii  ure                        4:7.4.7-1+deb12u5

Versions of packages libreoffice-common recommends:
ii  apparmor            3.0.8-3
ii  fonts-liberation2   2.1.5-1
ii  libexttextcat-data  3.4.5-1
ii  poppler-data        0.4.12-1
ii  python3-uno         4:7.4.7-1+deb12u5
ii  xdg-utils           1.1.3-4.1

Versions of packages libreoffice-common suggests:
ii  libreoffice-style-colibre [libreoffice-style]  4:7.4.7-1+deb12u5

-- no debconf information

--- a/usr.lib.libreoffice.program.soffice.bin
+++ b/usr.lib.libreoffice.program.soffice.bin
@@ -108,7 +108,7 @@ profile libreoffice-soffice /usr/lib/libreoffice/program/soffice.bin {
   owner @{libo_user_dirs}/**/           rw,  #allow creating directories that we own
   owner @{libo_user_dirs}/**~lock.*     rw,  #lock file support
   owner @{libo_user_dirs}/**.@{libreoffice_ext} rwk,  #Open files rw with the right exts
-  owner @{libo_user_dirs}/{,**/}lu????????{,?,??,???,????}.tmp rwk, #Temporary file used when saving
+  owner @{libo_user_dirs}/{,**/}lu???????{,?,??,???,????,?????}.tmp rwk, #Temporary file used when saving
   owner @{libo_user_dirs}/{,**/}.directory r, #Read directory settings on KDE
 
   # Settings

--- End Message ---
--- Begin Message --- 
Source: libreoffice
Source-Version: 4:25.2.3~rc1-1
Done: Rene Engelhard <rene@debian.org>

We believe that the bug you reported is fixed in the latest version of
libreoffice, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1090814@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Rene Engelhard <rene@debian.org> (supplier of updated libreoffice package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 11 Apr 2025 15:35:51 +0200
Source: libreoffice
Architecture: source
Version: 4:25.2.3~rc1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Changed-By: Rene Engelhard <rene@debian.org>
Closes: 1090814 1100930 1102089
Changes:
 libreoffice (4:25.2.3~rc1-1) experimental; urgency=medium
 .
   * New upstream release candidate
 .
   * debian/patches/apparmor-updates.diff:
     - also allow 7 digits in profile, thanks Matija Nalis <mnalis-debianbug@voyager.hr>
       for the patch (closes: #1090814)
     - allow /etc/paperspecs (used by paperconf) (closes: #1100930)
   * debian/po:
     - add ca.po (closes: #1102089)
Checksums-Sha1:
 96e4e837750a015e6c1ac2198d68b6a29bfbdcbf 36659 libreoffice_25.2.3~rc1-1.dsc
 286fa5ab791c9bd1d7a0367e54f761e98d6416b9 59162464 libreoffice_25.2.3~rc1.orig-helpcontent2.tar.xz
 f2d11ba436fb42027b3c70e1706bf3e4f3803a9e 230575708 libreoffice_25.2.3~rc1.orig-translations.tar.xz
 32fb6e6ac89d03d3fd4093a1f91b09ed4b6226ac 281924828 libreoffice_25.2.3~rc1.orig.tar.xz
 75f40b3c2428dde4b3faa1fb80a1f0868e1c6c3e 833 libreoffice_25.2.3~rc1.orig.tar.xz.asc
 be0b04053ad3fa7b5279c6326f8d56bce9b92f51 28295048 libreoffice_25.2.3~rc1-1.debian.tar.xz
 3acd88fac0247b6741756ce3837c5987306b3d69 25993 libreoffice_25.2.3~rc1-1_source.buildinfo
Checksums-Sha256:
 2108f2dfb274378d93f74876f067141bd2537f7504c3cef78377b131bafda3a4 36659 libreoffice_25.2.3~rc1-1.dsc
 132c1b236421003e84b9119fa5600b99d794303450fb2c738d125b94977f9c99 59162464 libreoffice_25.2.3~rc1.orig-helpcontent2.tar.xz
 f2a7feb6b28395628533f757880976e178a2c78814aba3ef849247d10ebc2e74 230575708 libreoffice_25.2.3~rc1.orig-translations.tar.xz
 55b365b4f4cab151e9d678688eba96442bb8ede15d6d8d61ba3568a0c3897529 281924828 libreoffice_25.2.3~rc1.orig.tar.xz
 9c9c9d251b7a44d3174a2dc7cb5c1f63672bb27ca3c8a57bce927faf37fef06e 833 libreoffice_25.2.3~rc1.orig.tar.xz.asc
 ea264cf09293c258811672f24e2d34860b9341202f16369fe8baf4250b5411f7 28295048 libreoffice_25.2.3~rc1-1.debian.tar.xz
 bb3f4e0fc1b14016564add9f3f90f808c7bc1d93c11686d13867d6cf4059de16 25993 libreoffice_25.2.3~rc1-1_source.buildinfo
Files:
 d2466ed95b228d2bfafd4deddc737de2 36659 editors optional libreoffice_25.2.3~rc1-1.dsc
 0b88f6e11a3ba7f1b8f2956d1bad09e0 59162464 editors optional libreoffice_25.2.3~rc1.orig-helpcontent2.tar.xz
 80d0a9806fe007890600cf844bd03468 230575708 editors optional libreoffice_25.2.3~rc1.orig-translations.tar.xz
 cd6fbc62bfe00f7140bb2ca446565566 281924828 editors optional libreoffice_25.2.3~rc1.orig.tar.xz
 b7a402df8ae3a5be47c8e384d18368e5 833 editors optional libreoffice_25.2.3~rc1.orig.tar.xz.asc
 daf8c11dae435735f157084cec1a30a1 28295048 editors optional libreoffice_25.2.3~rc1-1.debian.tar.xz
 10fbf774ffca46ce68435d2f0cd810ca 25993 editors optional libreoffice_25.2.3~rc1-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=HnRa
-----END PGP SIGNATURE-----

Attachment: pgpFNPo0HFOLn.pgp
Description: PGP signature


--- End Message ---
Reply to: