Merge lp:~tiagosh/ubuntu/wily/telepathy-mission-control-5/allow-getprop-execution into lp:ubuntu/wily/telepathy-mission-control-5

[Tiago Salem Herrmann]

Allow getprop execution by mission-control and its plugins.

Allow getprop execution by mission-control and its plugins.

This is required by the following MR:
https://code.launchpad.net/~tiagosh/telepathy-ofono/add-ril-mc-plugin/+merge/259173

[Jamie Strandboge (jdstrand)]

This was previously discussed with the security. LGTM

review: Approve

Unmerged revisions

83. By Tiago Salem Herrmann on 2015-05-14

Allow getprop execution by mission-control and its plugins

=== modified file 'debian/apparmor-profile'
--- debian/apparmor-profile	2014-09-02 21:06:42 +0000
+++ debian/apparmor-profile	2015-05-14 21:29:20 +0000
@@ -59,6 +59,11 @@
     /usr/share/accounts/services/                    r,
     /usr/share/accounts/services/**                  r,
 
+    # for mcp-account-manager-ofono.so loaded dynamically by mission-control
+    owner @{PROC}/[0-9]*/fd/ r,
+    /usr/bin/getprop ix,
+    /{,android/}system/build.prop r,
+
     # Site-specific additions and overrides. See local/README for details.
     # Please note that accesses in local/usr.lib.telepathy are also applied to
     # /usr/lib/telepathy/telepathy-*.