Vincas Dargis has proposed merging 
lp:~talkless/apparmor/abstractions_fonts_mmap into lp:apparmor.

Requested reviews:
  intrigeri (intrigeri)
  AppArmor Developers (apparmor-dev)

For more details, see:
https://code.launchpad.net/~talkless/apparmor/abstractions_fonts_mmap/+merge/330884

I have discovered that application (skypeforlinux) might want to mmap fonts, 
and I am proposing to allow it:

type=AVC msg=audit(1505568463.561:482): apparmor="DENIED" operation="file_mmap" 
profile="skypeforlinux" 
name="/usr/share/fonts/opentype/noto/NotoSansCJK-Regular.ttc" pid=4255 
comm="skypeforlinux" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
type=SYSCALL msg=audit(1505568463.561:482): arch=c000003e syscall=9 per=400000 
success=no exit=-13 a0=0 a1=11e15c8 a2=1 a3=2 items=0 ppid=1 pid=4255 auid=1000 
uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 
tty=tty2 ses=2 comm="skypeforlinux" 
exe="/usr/share/skypeforlinux/skypeforlinux" key=(null)
type=PROCTITLE msg=audit(1505568463.561:482): 
proctitle=2F7573722F73686172652F736B797065666F726C696E75782F736B797065666F726C696E7578202D2D65786563757465642D66726F6D3D2F686F6D652F76696E636173202D2D7069643D34323438
-- 
Your team AppArmor Developers is requested to review the proposed merge of 
lp:~talkless/apparmor/abstractions_fonts_mmap into lp:apparmor.
=== modified file 'profiles/apparmor.d/abstractions/fonts'
--- profiles/apparmor.d/abstractions/fonts	2014-02-14 20:28:12 +0000
+++ profiles/apparmor.d/abstractions/fonts	2017-09-16 13:38:26 +0000
@@ -15,7 +15,7 @@
   /usr/lib/xorg/modules/fonts/**.so*    mr,
 
   /usr/share/fonts/                     r,
-  /usr/share/fonts/**                   r,
+  /usr/share/fonts/**                   mr,
 
   /etc/fonts/**                         r,
   /usr/share/fontconfig/conf.avail/**   r,

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to