[Libreoffice-commits] core.git: sysui/desktop

[Rene Engelhard]

 sysui/desktop/apparmor/program.soffice.bin |    8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

New commits:
commit 24702687433842a6e9e8a1070ead46c035192bf3
Author: Rene Engelhard <rene at debian.org>
Date:   Sat Jan 20 15:54:43 2018 +0100

    deb#887593 use child profile for gpg
    
    see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887593#41
    
    Change-Id: I365de8bf8a43a1aa304c5206a1f0c29d6a44855e

diff --git a/sysui/desktop/apparmor/program.soffice.bin b/sysui/desktop/apparmor/program.soffice.bin
index cbed1b69d4a2..ba1e248917be 100644
--- a/sysui/desktop/apparmor/program.soffice.bin
+++ b/sysui/desktop/apparmor/program.soffice.bin
@@ -126,8 +126,8 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
   /usr/bin/lpr                          rmPUx,
   /usr/bin/paperconf                    rmix,
   /usr/bin/gpgconf                      rmix,
-  /usr/bin/gpg                          rmix,
-  /usr/bin/gpgsm                        rmix,
+  /usr/bin/gpg                          rmCx -> gpg,
+  /usr/bin/gpgsm                        rmCx -> gpg,
 
   /dev/tty                              rw,
 
@@ -171,5 +171,7 @@ profile libreoffice-soffice INSTDIR-program/soffice.bin flags=(complain) {
 
   owner @{HOME}/.mozilla/firefox/** r,
   # there is abstractions/gnupg but that's just for gpg1...
-  owner @{HOME}/.gnupg/* r,
+  profile gpg {
+    owner @{HOME}/.gnupg/* r,
+  }
 }