Ulrike Uhlig has proposed merging ~u-d/apparmor-profiles:thunderbird/launcher
into apparmor-profiles:master.
Requested reviews:
AppArmor Developers (apparmor-dev)
For more details, see:
https://code.launchpad.net/~u-d/apparmor-profiles/+git/apparmor-profiles/+merge/320276
Hi,
I'd like to request a review and merge for this change, which is supposed to
solve https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855346.
In Thunderbird, people should be allowed to view attachments, and for this
purpose they should be able to launch some standard applications.
Debian's Thunderbird will soon ship the profile per default and thus I am
concerned about usability for normal users.
Cheers,
ulrike
--
Your team AppArmor Developers is requested to review the proposed merge of
~u-d/apparmor-profiles:thunderbird/launcher into apparmor-profiles:master.
diff --git a/ubuntu/17.04/usr.bin.thunderbird b/ubuntu/17.04/usr.bin.thunderbird
index e74e9f5..90330a6 100644
--- a/ubuntu/17.04/usr.bin.thunderbird
+++ b/ubuntu/17.04/usr.bin.thunderbird
@@ -175,6 +175,13 @@ profile thunderbird /usr/lib/thunderbird/thunderbird {
/{usr/,}bin/uname Uxr,
/usr/bin/locale Uxr,
+ # Be able to lauch applications when viewing attachments
+ /usr/bin/eog xr,
+ /usr/bin/evince xr,
+ /usr/bin/file-roller xr,
+ /usr/bin/gedit xr,
+ /usr/bin/libreoffice xr,
+
/usr/bin/gpg Cx -> gpg,
profile gpg {
--
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
