From dffe00b4e3ddcef5a56ec37fd3d4fcfd847c2704 Mon Sep 17 00:00:00 2001 From: Vincas Dargis Date: Sun, 10 Feb 2019 15:49:36 +0200 Subject: [PATCH] fix(apparmor): fix file dialog on KDE desktop Opening file dialog produces error: ``` type=AVC msg=audit(1549805942.022:1474): apparmor="DENIED" operation="exec" profile="qtox" name="/usr/lib/x86_64-linux-gnu/libexec/kf5/kioslave" pid=2784 comm="qtox" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0 ``` Add rule to allow launching kioslave helper. --- security/apparmor/2.12.1/usr.bin.qtox | 2 ++ security/apparmor/2.13.2/usr.bin.qtox | 2 ++ 2 files changed, 4 insertions(+) diff --git a/security/apparmor/2.12.1/usr.bin.qtox b/security/apparmor/2.12.1/usr.bin.qtox index 1b15b8714..3e5b7a14d 100644 --- a/security/apparmor/2.12.1/usr.bin.qtox +++ b/security/apparmor/2.12.1/usr.bin.qtox @@ -28,6 +28,8 @@ profile qtox /usr{,/local}/bin/qtox { #TODO: use xdg-open abstraction when it's available /usr/bin/xdg-open PUx, + #TODO: use named profile or abstraction when it's available + /usr/lib/@{multiarch}/libexec/kf5/kioslave PUx, # Additional libraries diff --git a/security/apparmor/2.13.2/usr.bin.qtox b/security/apparmor/2.13.2/usr.bin.qtox index e160b5555..b5729ec22 100644 --- a/security/apparmor/2.13.2/usr.bin.qtox +++ b/security/apparmor/2.13.2/usr.bin.qtox @@ -35,6 +35,8 @@ profile qtox /usr{,/local}/bin/qtox { #TODO: use xdg-open abstraction when it's available /usr/bin/xdg-open PUx, + #TODO: use named profile or abstraction when it's available + /usr/lib/@{multiarch}/libexec/kf5/kioslave PUx, # Additional libraries