mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-02 07:15:18 +00:00
Code Issues Releases Wiki Activity

abstractions/base: allow reading tzdata ICU zoneinfo DB

Browse Source 
This is used by various applications including libreoffice etc so it may as well
be added to the base abstraction along with the existing zoneinfo DB access.

AVC apparmor="DENIED" operation="open" class="file" profile="snap.libreoffice.calc" name="/usr/share/zoneinfo-icu/44/le/zoneinfo64.res" pid=44742 comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

Signed-off-by: Alex Murray <alex.murray@canonical.com>
This commit is contained in:
Alex Murray
2023-04-06 11:47:44 +09:30
parent 90b3b5e572
commit c691b11d6e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/abstractions/base
View File

@@ -36,8 +36,8 @@
/usr/share/locale-langpack/** r, /usr/share/locale-langpack/** r,
/usr/share/locale/** r, /usr/share/locale/** r,
/usr/share/**/locale/** r, /usr/share/**/locale/** r,
/usr/share/zoneinfo/ r, /usr/share/zoneinfo{,-icu}/ r,
/usr/share/zoneinfo/** r, /usr/share/zoneinfo{,-icu}/** r,
/usr/share/X11/locale/** r, /usr/share/X11/locale/** r,
@{run}/systemd/journal/dev-log w, @{run}/systemd/journal/dev-log w,
# systemd native journal API (see sd_journal_print(4)) # systemd native journal API (see sd_journal_print(4))