forked from amazingfate/loongoffice
577fbba417
Make them less resrictive when executing other exes This lets the splash screen work again. Modify AppArmor.sh to be more useful. Change-Id: Icf06910c845d9389b9b75c1623037e1d07489728 Reviewed-on: https://gerrit.libreoffice.org/24043 Tested-by: Jenkins <ci@libreoffice.org> Reviewed-by: Björn Michaelsen <bjoern.michaelsen@canonical.com>
33 lines
1.2 KiB
Plaintext
33 lines
1.2 KiB
Plaintext
# ------------------------------------------------------------------
|
|
#
|
|
# Copyright (C) 2016 Canonical Ltd.
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
#
|
|
# Author: Bryan Quigley <bryan.quigley@canonical.com>
|
|
#
|
|
# ------------------------------------------------------------------
|
|
|
|
#include <tunables/global>
|
|
|
|
profile libreoffice-oopslash INSTDIR-program/oosplash {
|
|
#include <abstractions/base>
|
|
|
|
/etc/libreoffice/ r,
|
|
/etc/libreoffice/** r,
|
|
/etc/passwd r,
|
|
/etc/nsswitch.conf r,
|
|
/run/nscd/passwd r,
|
|
/usr/lib{,32,64}/ure/bin/javaldx rmpux,
|
|
/usr/share/libreoffice/program/* r,
|
|
INSTDIR-program/** r,
|
|
INSTDIR-program/soffice.bin rmpx,
|
|
INSTDIR-program/javaldx rmpux,
|
|
owner @{HOME}/.Xauthority r,
|
|
owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
|
|
unix peer=(addr=@/tmp/.ICE-unix/* label=unconfined),
|
|
unix peer=(addr=@/tmp/.X11-unix/* label=unconfined),
|
|
}
|