[pkg-apparmor] Bug#883256: Bug#883256: Bug#883256: Re: apparmor-profiles-extra: Totem can't access files outside $HOME

Vincas Dargis vindrg at gmail.com
Fri Dec 1 23:55:49 UTC 2017


On 2017-12-02 01:26, Seth Arnold wrote:
> So a rule such as
> 
> /{media,mnt,srv,wherever/mounts/are}/ r,
> 
> would be useful.

Thanks for fixing this!

But.. wait...

There are rules for browsing all directories and reading from common mount points in abstractions/totem already:

/**/ r, [1]

/{media,mnt,opt,srv}/** r, [0]

So probably reporter Philip has hit a deny on some over path.

[0] https://anonscm.debian.org/cgit/collab-maint/apparmor-profiles-extra.git/tree/profiles/abstractions/totem#n24
[1] https://anonscm.debian.org/cgit/collab-maint/apparmor-profiles-extra.git/tree/profiles/abstractions/totem#n29



More information about the pkg-apparmor-team mailing list