Ubuntu
apparmor package

KDE abstraction is Suse-specific, does not work on Ubuntu

Bug #148309 reported by John Dong
4
Affects Status Importance Assigned to Milestone
apparmor (Ubuntu)
Fix Released
Low
Kees Cook

Bug Description

Binary package hint: apparmor

I just looked at the KDE abstraction and noticed lots of lines like:

/opt/kde3/share/config/kdeglobals

These are Novell/SUSE specific installation prefixes for KDE and not appropriate on Ubuntu. This renders KDE abstractions nearly useless.

Related branches

lp:ubuntu/karmic/apparmor
Revision history for this message
Andreas Simon (andreas-w-simon) wrote :

Yes, many paths in /etc/apparmor.d/abstractions/kde are wrong for Ubuntu/Kubuntu.

Here is a kde file, in which I have corrected the paths. I am sure that it's far from complete (and may contain an error or two) but it's a start.

Changed in apparmor:
status: New → Confirmed
Revision history for this message
John Dong (jdong) wrote :

Looks a lot better!

We should also add "/etc/kubuntu-default-settings/* r" to the mix.

Grepping for "opt" in abstractions shows a few more minor offendors too.

Mathias Gug (mathiaz)
Changed in apparmor:
importance: Undecided → Low
Kees Cook (kees)
Changed in apparmor:
assignee: nobody → keescook
status: Confirmed → In Progress
Revision history for this message
Kees Cook (kees) wrote :

apparmor (2.1+993-0ubuntu3) gutsy; urgency=low

  [ Mathias Gug ]
  * Add mdns4 resolution to nameservice abstraction. (LP: #148579).
  * Update syslog-ng profile. (LP: #148708).
  * Add xen tls libraries to base abstraction. (LP: #150282).
  * Update cups-client abstraction: add /var/run/cups/cups.sock. (LP: #151269)

  [ Kees Cook ]
  * Adjust KDE abstractions for Ubuntu paths (LP: #148309).

 -- Kees Cook <email address hidden> Fri, 12 Oct 2007 12:54:36 -0700

Changed in apparmor:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.