Comment 2 for bug 1899667

Revision history for this message
SA (superaorta) wrote :

[] audit: type=1400 audit(): apparmor="DENIED" operation="file_inherit" profile="libreoffice-senddoc" name="xxxxx" pid=8106 comm="senddoc" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000

[] audit: type=1400 audit(): apparmor="DENIED" operation="exec" profile="libreoffice-senddoc" name="/usr/bin/kmail" pid=8116 comm="senddoc" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

cat /etc/apparmor.d/usr.lib.libreoffice.program.senddoc

#include <tunables/global>

profile libreoffice-senddoc /usr/lib/libreoffice/program/senddoc {
  #include <abstractions/base>

  #include <abstractions/user-tmp>

  /{usr/,}bin/sh rmix,
  /{usr/,}bin/bash rmix,
  /{usr/,}bin/dash rmix,
  /{usr/,}bin/sed rmix,
  /usr/bin/dirname rmix,
  /usr/bin/basename rmix,
  /{usr/,}bin/grep rmix,
  /{usr/,}bin/uname rmix,
  /usr/bin/xdg-open rPUx,
  /usr/bin/xdg-email rPUx,
  /dev/null rw,
  /usr/lib/libreoffice/program/uri-encode rmpux,
  /usr/share/libreoffice/share/config/* r,
  owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
}