[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1090814: marked as done (libreoffice-common: AppArmor sometimes prevents file saving (/luXXXXXXX.tmp temporary files))

Your message dated Mon, 14 Apr 2025 19:32:52 +0000
with message-id <E1u4PY4-004GKQ-LD@fasolo.debian.org>
and subject line Bug#1090814: fixed in libreoffice 4:25.2.2-2
has caused the Debian Bug report #1090814,
regarding libreoffice-common: AppArmor sometimes prevents file saving (/luXXXXXXX.tmp temporary files)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1090814: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1090814
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: libreoffice-common
Version: 4:7.4.7-1+deb12u5
Severity: normal
Tags: patch

Dear Maintainer,

Sometimes (but relatively rarely), with AppArmor profile enforced, user is
unable to save files in e.g. Libreoffice Calc with error:

"Error saving the document DOCUMENTNAME:
Write Error.
The file could not be written."

(where DOCUMENTNAME is name of actual document we've modifed and are trying to save)

Retrying does not help. 

At the same time, following errors are logged in dmesg(8):

apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/mnalis/Documents/Ostalo/lu2654yy7.tmp" pid=2654 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1001 ouid=1001
apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/mnalis/Documents/Ostalo/lu2654yy9.tmp" pid=2654 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1001 ouid=1001
apparmor="DENIED" operation="mknod" profile="libreoffice-soffice" name="/home/mnalis/Documents/Ostalo/lu2654yyb.tmp" pid=2654 comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1001 ouid=1001

I've tracked it down to this line in /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin AppArmor profile:
owner @{libo_user_dirs}/{,**/}lu????????{,?,??,???,????}.tmp rwk, #Temporary file used when saving

which seems to expect that there are at least 8 characters between "lu" and ".tmp", and sometimes there are only 7.

Bug occurs on latest Bookwork (Stable), but same AppArmor line appears in latest Sid's 24.8.3-3 and experimental's 25.2.0~beta1-2 so I assume the same problem is also present there.

The attached diff fixes the issue for me.



-- Package-specific info:
Configuration file                            Package             Exists Changed
/etc/libreoffice/registry/Langpack-en-US.xcd  libreoffice-common  Yes     No
/etc/libreoffice/registry/lingucomponent.xcd  libreoffice-common  Yes     No
/etc/libreoffice/registry/main.xcd            libreoffice-common  Yes     No
/etc/libreoffice/registry/pdfimport.xcd       libreoffice-common  Yes     No
/etc/libreoffice/registry/res/fcfg_langpack_e libreoffice-common  Yes     No
/etc/libreoffice/registry/xsltfilter.xcd      libreoffice-common  Yes     No

-- System Information:
Debian Release: 12.8
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-28-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages libreoffice-common depends on:
ii  libnumbertext-data         1.0.11-1
ii  libreoffice-style-colibre  4:7.4.7-1+deb12u5
ii  ucf                        3.0043+nmu1
ii  ure                        4:7.4.7-1+deb12u5

Versions of packages libreoffice-common recommends:
ii  apparmor            3.0.8-3
ii  fonts-liberation2   2.1.5-1
ii  libexttextcat-data  3.4.5-1
ii  poppler-data        0.4.12-1
ii  python3-uno         4:7.4.7-1+deb12u5
ii  xdg-utils           1.1.3-4.1

Versions of packages libreoffice-common suggests:
ii  libreoffice-style-colibre [libreoffice-style]  4:7.4.7-1+deb12u5

-- no debconf information

--- a/usr.lib.libreoffice.program.soffice.bin
+++ b/usr.lib.libreoffice.program.soffice.bin
@@ -108,7 +108,7 @@ profile libreoffice-soffice /usr/lib/libreoffice/program/soffice.bin {
   owner @{libo_user_dirs}/**/           rw,  #allow creating directories that we own
   owner @{libo_user_dirs}/**~lock.*     rw,  #lock file support
   owner @{libo_user_dirs}/**.@{libreoffice_ext} rwk,  #Open files rw with the right exts
-  owner @{libo_user_dirs}/{,**/}lu????????{,?,??,???,????}.tmp rwk, #Temporary file used when saving
+  owner @{libo_user_dirs}/{,**/}lu???????{,?,??,???,????,?????}.tmp rwk, #Temporary file used when saving
   owner @{libo_user_dirs}/{,**/}.directory r, #Read directory settings on KDE
 
   # Settings

--- End Message ---
--- Begin Message --- 
Source: libreoffice
Source-Version: 4:25.2.2-2
Done: Rene Engelhard <rene@debian.org>

We believe that the bug you reported is fixed in the latest version of
libreoffice, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1090814@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Rene Engelhard <rene@debian.org> (supplier of updated libreoffice package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 14 Apr 2025 20:52:28 +0200
Source: libreoffice
Architecture: source
Version: 4:25.2.2-2
Distribution: unstable
Urgency: medium
Maintainer: Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
Changed-By: Rene Engelhard <rene@debian.org>
Closes: 1090814 1100930 1102089
Changes:
 libreoffice (4:25.2.2-2) unstable; urgency=medium
 .
   * debian/patches/apparmor-updates.diff:
     - also allow 7 digits in profile, thanks
       Matija Nalis <mnalis-debianbug@voyager.hr> for the patch
       (closes: #1090814)
     - allow /etc/paperspecs (used by paperconf) (closes: #1100930)
   * debian/po:
     - add ca.po (closes: #1102089)
   * debian/rules:
     - add Build-Conflicts: gpg-from-sq [$(OOO_CHECK_ARCHS)] <!nocheck>, since
       xmlsecurity_signing fails with gpg being gpg-from-sq
Checksums-Sha1:
 912bd8ce374bef917b77f1ce967e68c21d9c500e 36633 libreoffice_25.2.2-2.dsc
 8af98a85421dbd6f3f1717dc6f49cc28594088da 28295620 libreoffice_25.2.2-2.debian.tar.xz
 ab6764e4c9500431933632228c602ac75c392488 25978 libreoffice_25.2.2-2_source.buildinfo
Checksums-Sha256:
 0322fcd88e7d3bc8b9eb408fc78dc0e255e10722ded7cbfe38f515b4540759af 36633 libreoffice_25.2.2-2.dsc
 82fcb57e10aae1163760bc2b016a2e5bf11185d673a6e95895b0c76867ffcdc7 28295620 libreoffice_25.2.2-2.debian.tar.xz
 9a7aaefe10bb21fe9c8dbaccb73f82ec23cf8c9cd5599c18457251c3619bbbc2 25978 libreoffice_25.2.2-2_source.buildinfo
Files:
 4788693aaa20ef212e01befb018a661f 36633 editors optional libreoffice_25.2.2-2.dsc
 f8448d1b5d1af8172c733546dff444ea 28295620 editors optional libreoffice_25.2.2-2.debian.tar.xz
 d46b7bbca5ab49d43ba11faed3511fe9 25978 editors optional libreoffice_25.2.2-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJEBAEBCgAuFiEE4S3qRnUGcM+pYIAdCqBFcdA+PnAFAmf9XG0QHHJlbmVAZGVi
aWFuLm9yZwAKCRAKoEVx0D4+cNJdD/wKIAPtv+PYWqdQ3DE8Nmd5bQf0tMQvUdr1
DWg5gLjRRm4RklsbYVv+cQWLPCEd1KqiRoRtyN8H52SOUykjhthPUf0HCB/U0H0I
xQl3VtG88FSJ8YGlZa4YvUmSu8VnuZW9coEfoOAqDILxg+ylkzgpf8ILn/OWo/UR
Un02oQCh7IWYhKHBr6my1bcVuylawySfSmr4KBAxmsHVHGx0pRi1UKW0cXDvyR+b
G7w63B3D14oaR/cftPrHJdFbNVCam2yWsMIH9LidGd8xiIF+0w7FDsrH+PJX4iE4
DdGBilpu8A44DywWJ1wCtqdBfb7SBWCQ/gryVbvj6y9OFjYm/WT+xS376xMdzc/2
GufFdaHmBAF4aTIeWp5Wok+zh7i8apMJgWaHq4TWsT9mTfYlepU/NmvlLyzThsxZ
uO9Q0jE8d8QsN0MKqQp/qDphJrxR04b+LpUJnGfePsHeSc3okoyK5R1FdNpS0h0b
zVDc7YKwcfdahPM9G20S82BKGGkn+K4nONnFz9u9ngcCS4d2EuoI2npFih+K96q4
UhjUkWzEGd1cO8rBXLW1sGTbC6puwAcJ34W3QtfVqRS25dlHdaewldaGhaNvjaWM
RxfFhBhReMzK0Pw/pdahf7YAuRqq61gfQVdAWP+6PQyUU7TMe//P8BdW9oZ6RdI0
EGnfOYhNJg==
=BqZd
-----END PGP SIGNATURE-----

Attachment: pgpmIfQoFkAn8.pgp
Description: PGP signature


--- End Message ---
Reply to: