Bug#971782: Place files not symlinks in /u/s/fonts

2020-10-21 Thread Jörg Sommer
Jörg Sommer schrieb am Mi 07. Okt, 09:15 (+0200):
> Package: fonts-font-awesome
> Version: 5.0.10+really4.7.0~dfsg-2
> Severity: normal
> 
> Hi,
> 
> I would like to ask if it's possible to move the files from
> /usr/share/fonts-font-awesome/fonts to /usr/share/fonts. I'm using
> AppArmor and this allows access to files underneath /usr/share/fonts. But
> if there are symlinks to files in other directories, the access gets
> prohibited.

Here's a log from the access by Libre Office:

```
AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" 
name="/usr/share/fonts-font-awesome/fonts/FontAwesome.otf" pid=686625 
comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" 
name="/usr/share/fonts-font-awesome/fonts/FontAwesome.otf" pid=686625 
comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" 
name="/usr/share/fonts-font-awesome/fonts/fontawesome-webfont.ttf" pid=686625 
comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
AVC apparmor="ALLOWED" operation="open" profile="libreoffice-soffice" 
name="/usr/share/fonts-font-awesome/fonts/fontawesome-webfont.ttf" pid=686625 
comm="soffice.bin" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
```

Regards Jörg


signature.asc
Description: PGP signature


Bug#971782: Place files not symlinks in /u/s/fonts

2020-10-07 Thread Jörg Sommer
Package: fonts-font-awesome
Version: 5.0.10+really4.7.0~dfsg-2
Severity: normal

Hi,

I would like to ask if it's possible to move the files from
/usr/share/fonts-font-awesome/fonts to /usr/share/fonts. I'm using
AppArmor and this allows access to files underneath /usr/share/fonts. But
if there are symlinks to files in other directories, the access gets
prohibited.

Regards Jörg


-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.8.0-2-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_CRAP, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information


signature.asc
Description: PGP signature