[apparmor] [Merge] lp:~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location into lp:apparmor-profiles

[Steve Beattie]

On Fri, Aug 28, 2015 at 05:12:23PM -0000, intrigeri wrote:
> intrigeri has proposed merging lp:~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location into lp:apparmor-profiles.
> 
> Requested reviews:
>   AppArmor Developers (apparmor-dev)
> 
> For more details, see:
> https://code.launchpad.net/~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location/+merge/269536
> -- 
> Your team AppArmor Developers is requested to review the proposed merge of lp:~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location into lp:apparmor-profiles.

> === modified file 'ubuntu/15.04/usr.bin.pulseaudio'
> --- ubuntu/15.04/usr.bin.pulseaudio	2014-10-24 19:02:18 +0000
> +++ ubuntu/15.04/usr.bin.pulseaudio	2015-08-28 17:12:00 +0000
> @@ -79,7 +79,11 @@
>    owner /tmp/pulse-*/pid rwk,
>    owner /tmp/pulse-*/native rwk,
>    owner /tmp/pulse-*/autospawn.lock rwk,
> -  owner /tmp/orcexec.* rmw,
> +
> +  owner /tmp/orcexec.* mrw,
> +  owner /{,var/}run/user/[0-9]*/orcexec.* mrw,
> +  # needed if /tmp is mounted noexec:
> +  owner @{HOME}/orcexec.* mr,

I went ahead and merged this, but I'm mildly confused that this last
line doesn't require write access.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150828/76323b21/attachment.pgp>