AppArmor Profiles

Merge lp:~intrigeri/apparmor-profiles/totem-3.18.1 into lp:apparmor-profiles

  1. totem-3.18.1
  2. Merge into master
Proposed by intrigeri
Status: Merged
Merged at revision: 163
Proposed branch: lp:~intrigeri/apparmor-profiles/totem-3.18.1
Merge into: lp:apparmor-profiles
Diff against target: 50 lines (+11/-2)
3 files modified
ubuntu/16.04/abstractions/totem (+6/-2)
ubuntu/16.04/usr.bin.totem (+3/-0)
ubuntu/16.04/usr.bin.totem-previewers (+2/-0)
To merge this branch: bzr merge lp:~intrigeri/apparmor-profiles/totem-3.18.1
Reviewer Review Type Date Requested Status
Steve Beattie Approve
Review via email: mp+281432@code.launchpad.net

Description of the change

This fixes problems reported by Julian Andres Klode on https://bugs.debian.org/808859, and a few other ones I could not ignore anymore once I was at it :)

To post a comment you must log in.
Revision history for this message
intrigeri (intrigeri) wrote :

Ping?

Revision history for this message
intrigeri (intrigeri) wrote :

Ping?

Revision history for this message
Steve Beattie (sbeattie) wrote :

Looks good, merged after fixing up to apply to the 16.10 tree as well. Thanks, and my apologies for the delay.

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1=== modified file 'ubuntu/16.04/abstractions/totem'
2--- ubuntu/16.04/abstractions/totem 2015-10-27 01:49:53 +0000
3+++ ubuntu/16.04/abstractions/totem 2015-12-30 20:25:02 +0000
4@@ -28,8 +28,12 @@
5 /usr/share/** r,
6 /{media,mnt,opt,srv}/** r,
7
8- /usr/lib/@{multiarch}/gstreamer[0-9].[0-9]/gstreamer-[0-9].[0-9]/gst-plugin-scanner Cix -> gst_plugin_scanner,
9+ /usr/lib/@{multiarch}/gstreamer[0-9]*.[0-9]*/gstreamer-[0-9]*.[0-9]*/gst-plugin-scanner Cix -> gst_plugin_scanner,
10
11 owner @{HOME}/.cache/tracker/meta.db k,
12 owner @{HOME}/.cache/tracker/meta.db-shm k,
13- owner @{HOME}/.local/share/grilo-plugins/*.db k,
14+ owner @{HOME}/.local/share/grilo-plugins/*.db{,-shm} k,
15+
16+ owner @{PROC}/@{pid}/status r,
17+
18+ /sys/devices/system/node/*/meminfo r,
19
20=== modified file 'ubuntu/16.04/usr.bin.totem'
21--- ubuntu/16.04/usr.bin.totem 2015-11-13 19:05:05 +0000
22+++ ubuntu/16.04/usr.bin.totem 2015-12-30 20:25:02 +0000
23@@ -13,6 +13,7 @@
24 /usr/include/**/pyconfig.h r,
25
26 /usr/bin/totem r,
27+ /usr/bin/totem-video-thumbnailer Pix,
28 /dev/sr* r,
29
30 # Allow read and write on anything in @{HOME}. Lenient, but
31@@ -23,4 +24,6 @@
32 owner /{,var/}run/user/*/dconf/user w,
33 owner /{,var/}run/user/*/at-spi2-*/ rw,
34 owner /{,var/}run/user/*/at-spi2-*/** rw,
35+
36+ /sys/devices/pci[0-9]*/**/config r,
37 }
38
39=== modified file 'ubuntu/16.04/usr.bin.totem-previewers'
40--- ubuntu/16.04/usr.bin.totem-previewers 2015-10-27 01:49:53 +0000
41+++ ubuntu/16.04/usr.bin.totem-previewers 2015-12-30 20:25:02 +0000
42@@ -14,6 +14,8 @@
43 # Not needed by nautilus, but maybe other applications
44 owner /**.[pP][nN][gG] w,
45 owner /**.[jJ][pP]{,[eE]}[gG] w,
46+
47+ /usr/bin/totem-video-thumbnailer r,
48 }
49
50 /usr/bin/totem-audio-preview {

Subscribers

People subscribed via source and target branches

to status/vote changes: