* Updates for abstract and anonymous socket mediation (LP: #1362199):
- ubuntu/*/ubuntu-*:
+ use dbus-strict and dbus-session-strict abstractions and remove
duplicated policy
+ allow ubuntu-sdk and ubuntu-webapp connect, receive and send on the
maliit abstract socket
+ allow write access to owner /{,var/}run/user/*/@{APP_PKGNAME}/{,**}
- ubuntu/*/unconfined: allow unix
- ubuntu/webview:
+ allow oxide to talk to sandbox via unix sockets
+ allow sandbox to talk to @{APP_PKGNAME}_@{APP_APPNAME}_@{APP_VERSION}
peer
+ allow various unix perms from base abstract for the sandbox to use
unix sockets
- debian/control: Depends on apparmor >= 2.8.96~2541-0ubuntu4
* ubuntu/webview: use @{APP_PKGNAME}_@{APP_APPNAME}_@{APP_VERSION} for
signal now that we have @{APP_APPNAME} available (LP: #1363112)
* ubuntu/debug: 'audit deny @{HOME}/.local/share/ r' which is used by the
SDK to see if confined
* debian/control: Depends on apparmor >= 2.8.96~2541-0ubuntu4~
-- Jamie Strandboge <email address hidden> Fri, 05 Sep 2014 15:17:07 -0500
This bug was fixed in the package apparmor- easyprof- ubuntu - 1.2.22
--------------- easyprof- ubuntu (1.2.22) utopic; urgency=medium
apparmor-
* Updates for abstract and anonymous socket mediation (LP: #1362199): }run/user/ */@{APP_ PKGNAME} /{,**} */unconfined: allow unix _@{APP_ APPNAME} _@{APP_ VERSION} 2541-0ubuntu4 _@{APP_ APPNAME} _@{APP_ VERSION} for /.local/ share/ r' which is used by the 2541-0ubuntu4~
- ubuntu/*/ubuntu-*:
+ use dbus-strict and dbus-session-strict abstractions and remove
duplicated policy
+ allow ubuntu-sdk and ubuntu-webapp connect, receive and send on the
maliit abstract socket
+ allow write access to owner /{,var/
- ubuntu/
- ubuntu/webview:
+ allow oxide to talk to sandbox via unix sockets
+ allow sandbox to talk to @{APP_PKGNAME}
peer
+ allow various unix perms from base abstract for the sandbox to use
unix sockets
- debian/control: Depends on apparmor >= 2.8.96~
* ubuntu/webview: use @{APP_PKGNAME}
signal now that we have @{APP_APPNAME} available (LP: #1363112)
* ubuntu/debug: 'audit deny @{HOME}
SDK to see if confined
* debian/control: Depends on apparmor >= 2.8.96~
-- Jamie Strandboge <email address hidden> Fri, 05 Sep 2014 15:17:07 -0500