Browse Source

fix(apparmor): Fix hunspell access

AppArmor denies access to hunspell files:
```
type=AVC msg=audit(1548511779.241:1773): apparmor="DENIED"
operation="open" profile="qtox" name="/usr/share/hunspell/lt_LT.aff"
pid=9833 comm="qtox" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0

type=AVC msg=audit(1548511779.241:1774): apparmor="DENIED"
operation="open" profile="qtox" name="/usr/share/hunspell/lt_LT.dic"
pid=9833 comm="qtox" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0
```

Add rule to allow reading hunspell dictionaries.
reviewable/pr5577/r2
Vincas Dargis 7 years ago
parent
commit
577aeb8fa3
  1. 1
      security/apparmor/2.12.1/usr.bin.qtox
  2. 1
      security/apparmor/2.13.2/usr.bin.qtox

1
security/apparmor/2.12.1/usr.bin.qtox

@ -50,6 +50,7 @@ profile qtox /usr{,/local}/bin/qtox { @@ -50,6 +50,7 @@ profile qtox /usr{,/local}/bin/qtox {
# System files
/usr/share/hunspell/* r,
@{qtox_additional_rw_dirs}/ r,
@{qtox_additional_rw_dirs}/** rw,

1
security/apparmor/2.13.2/usr.bin.qtox

@ -56,6 +56,7 @@ profile qtox /usr{,/local}/bin/qtox { @@ -56,6 +56,7 @@ profile qtox /usr{,/local}/bin/qtox {
# System files
/usr/share/hunspell/* r,
@{qtox_additional_rw_dirs}/ r,
@{qtox_additional_rw_dirs}/** rw,

Loading…
Cancel
Save