[iortcw] 01/01: apparmor: add a child profile for the "safe mode" popups (tested with xmessage and zenity - kdialog will probably need more rules)

[Simon McVittie]

This is an automated email from the git hooks/post-receive script.

smcv pushed a commit to branch master
in repository iortcw.

commit 22531a00bce5e510e094ee677ba78f718fc3bed5
Author: Simon McVittie <smcv at debian.org>
Date:   Tue Mar 8 09:12:24 2016 +0000

    apparmor: add a child profile for the "safe mode" popups (tested with xmessage and zenity - kdialog will probably need more rules)
---
 debian/apparmor.d/usr.lib.rtcw | 21 ++++++++++++++++++---
 debian/changelog               |  7 +++++++
 2 files changed, 25 insertions(+), 3 deletions(-)

diff --git a/debian/apparmor.d/usr.lib.rtcw b/debian/apparmor.d/usr.lib.rtcw
index 5d90eae..1a37c84 100644
--- a/debian/apparmor.d/usr.lib.rtcw
+++ b/debian/apparmor.d/usr.lib.rtcw
@@ -28,9 +28,9 @@
   owner @{HOME}/.wolf/{,**} rwk,
 
   # "safe mode" prompt
-  /usr/bin/kdialog mrix,
-  /usr/bin/xmessage mrix,
-  /usr/bin/zenity mrix,
+  /usr/bin/kdialog Cx -> popup,
+  /usr/bin/xmessage Cx -> popup,
+  /usr/bin/zenity Cx -> popup,
 
   # used by PulseAudio
   /etc/machine-id r,
@@ -47,4 +47,19 @@
   /sys/devices/**/sound/**/input*/** r,
   /sys/devices/**/sound/timer/uevent r,
   /sys/devices/pci*/**/uevent r,
+
+  profile popup (complain) {
+    #include <abstractions/X>
+    #include <abstractions/base>
+    #include <abstractions/fonts>
+    #include <abstractions/freedesktop.org>
+
+    /etc/X11/app-defaults/Xmessage-color r,
+    /usr/bin/kdialog mr,
+    /usr/bin/xmessage mr,
+    /usr/bin/zenity mr,
+    /usr/share/themes/** r,
+    /usr/share/zenity/** r,
+    owner @{HOME}/.config/gtk-3.0/settings.ini r,
+  }
 }
diff --git a/debian/changelog b/debian/changelog
index 9eceb1e..b284b7c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+iortcw (1.42d+dfsg1-2) UNRELEASED; urgency=medium
+
+  * apparmor: add a child profile for the "safe mode" popups (tested
+    with xmessage and zenity - kdialog will probably need more rules)
+
+ -- Simon McVittie <smcv at debian.org>  Tue, 08 Mar 2016 09:10:46 +0000
+
 iortcw (1.42d+dfsg1-1) experimental; urgency=medium
 
   * New upstream release

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/iortcw.git