[Desktop-packages] [Bug 1772683] Re: [snap] Cannot sign a document, gpg keys are not listed
Andrew Thornton, may that be a different problem? Please see bug #1886092 for the non-snap version report and workaround/fix when Apparmor is the problem. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libreoffice in Ubuntu. https://bugs.launchpad.net/bugs/1772683 Title: [snap] Cannot sign a document, gpg keys are not listed Status in LibreOffice: Won't Fix Status in libreoffice package in Ubuntu: Triaged Bug description: (initially reported on the forum: https://forum.snapcraft.io/t /libreoffice-snap-missing-features-and-known-bugs/3920/10) Libreoffice 6.0.4.2 (64, candidate channel). Steps to reproduce: 1) snap run libreoffice.writer 2) write something, then save the document (anywhere) on disk 3) Open the File menu, then Digital Signatures > Digital Signatures… 4) in the dialog, click "Sign Document…" Expected result: your GPG keys are listed Current result: no keys are listed To manage notifications about this bug go to: https://bugs.launchpad.net/df-libreoffice/+bug/1772683/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1886092] Re: libreoffice doesn't list gpg private key for a digital signature
On my computer (Ubuntu Mate 20.04) this problem also causes the Tool,
Options dialog to hang for around 1 minute while trying to connect to
the GPG agent. The /var/log/syslog file lists lots of apparmor DENIED
entries and the strace of the soffice program show lots of "gpg: can't
connect to the agent" errors for around one minute.
My solution was also to modify the
/etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin file to add to
the gpg profile section (just like zunda user did):
owner /{,var/}run/user/[0-9]*/gnupg/S.gpg-agent rw,
owner @{HOME}/.gnupg/* rw,
(the second line seems not to be required to sign the document but is required
to use the functions of the Certificate Manager, like adding new keys).
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libreoffice in Ubuntu.
https://bugs.launchpad.net/bugs/1886092
Title:
libreoffice doesn't list gpg private key for a digital signature
Status in libreoffice package in Ubuntu:
Confirmed
Bug description:
LibreOffice should be able to digitally sign a document with a GPG
private key in the GPG key chain. However, the key is not listed in
the list of certificates shown following the menu File - Digital
Signatures - Digital Signatures... - Sign Document..., after, e.g.,
creating and saving a document on LibreOffice Writer.
This seems to be because apparmor doesn't allow LibreOffice to
communicate with GPG agent. /var/log/syslog shows lines like:
Jul 1 15:15:14 misoan kernel: [20238.265212] audit: type=1400
audit(1593652514.311:333): apparmor="DENIED" operation="connect"
profile="libreoffice-soffice//gpg" name="/run/user/1001/gnupg/S.gpg-
agent" pid=23725 comm="gpg" requested_mask="wr" denied_mask="wr"
fsuid=1001 ouid=1001
Locally, I could make LibreOffice show the GPG private key with the
following change against
/etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin
--- apparmor.d.20200702/usr.lib.libreoffice.program.soffice.bin
2019-10-03 10:31:21.0 -1000
+++ apparmor.d/usr.lib.libreoffice.program.soffice.bin2020-07-02
08:59:44.516754728 -1000
@@ -223,6 +223,7 @@
owner @{HOME}/.gnupg/* r,
owner @{HOME}/.gnupg/random_seed rk,
+owner /{,var/}run/user/*/** rw,
}
# probably should become a subprofile like gpg above, but then it doesn't
Tested with the following packages on Xfce4
$ lsb_release -rd
Description: Ubuntu 20.04 LTS
Release: 20.04
$ apt-cache policy libreoffice-common | grep Installed
Installed: 1:6.4.3-0ubuntu0.20.04.1
$ apt-cache policy gpg gpg-agent | grep -B1 Installed
gpg:
Installed: 2.2.19-3ubuntu2
--
gpg-agent:
Installed: 2.2.19-3ubuntu2
$ apt-cache policy apparmor | grep Installed
Installed: 2.13.3-7ubuntu5.1
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/1886092/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 319575] Re: multiload-applet + sshfs breaks suspend
This bug still exists in Precise (12.04). The only workaround for end- users is to disable the disk monitoring (Preferences, uncheck Disk). There is a patch available at https://bugzilla.gnome.org/show_bug.cgi?id=579888#c3 (the upstream bug, still open BTW) but it is not included with the latest (gnome- applets-3.5.2) release nor the Trusty version (3.5.92). The only thing that patch does is to exclude the SSHFS mounts from monitoring (along with CIFS/Samba and NFS mounts which are currently excluded). -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-applets in Ubuntu. https://bugs.launchpad.net/bugs/319575 Title: multiload-applet + sshfs breaks suspend Status in The Gnome Panel Applets: New Status in gnome-applets package in Ubuntu: Triaged Status in gnome-applets package in Fedora: Unknown Bug description: Binary package hint: gnome-applets Hello! I'm running up-to-date Jaunty on two machines, one x86, the other amd64. The following bug happens on both. Steps to reproduce: 1) Add a System Monitor applet on your panel. (The applet's binary is /usr/lib/gnome-applets/multiload-applet-2.) 2) Set the applet to display disk load (right click - Preferences... - check Harddisk). 3) Mount something via sshfs. 4) Open the mount point in Nautilus. (As far as I can tell, you need to have files open on it. Only a 'ls' is not enough, but playing a song or something like that causes the same bug.) 5) Try to suspend the computer. (Either via the user switcher applet or a hotkey.) Problem: On both my computers the above sequence starts a suspend. The screen turns black (I think there's a cursor there, not sure if all the time) for about 20 seconds. Then there's a message to the effect timeout passed, task refused to freeze: multiload-apple. (No idea why the name is truncated.) Then the suspend is abandoned (i.e., the session resumes and I get the unlock screen dialog). I've done a bit of testing this morning and as far as I can tell removing any of the steps above prevents this from happening (i.e., suspend works). I'm not sure how long this bug has been active. My laptop has had this problem intermittently since before Intrepid, but I never noticed the timeout message and I would just shut it down if it didn't suspend in a few seconds. My other computer didn't have the load applet enabled (until I added it for testing), so this never manifested. I've tried reproducing this on my work machine (Intrepid) but apparently it has other bugs that interfere (i.e., sometimes it just doesn't resume, regardless of the steps above). Package: gnome-applets Version: 2.25.2-0ubuntu1 Package: sshfs Version: 2.1-1 (laptop:) $ uname -a Linux arioch 2.6.28-4-generic #11-Ubuntu SMP Fri Jan 16 21:57:57 UTC 2009 i686 GNU/Linux (desktop:) $ uname -a Linux mabelode 2.6.28-4-generic #11-Ubuntu SMP Fri Jan 16 21:50:52 UTC 2009 x86_64 GNU/Linux To manage notifications about this bug go to: https://bugs.launchpad.net/gnome-applets/+bug/319575/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
