[apparmor] [PATCH] 1/3 X abstraction

[Seth Arnold]

On Fri, Jul 24, 2015 at 12:38:47PM -0500, Jamie Strandboge wrote:
> profiles/apparmor.d/abstractions/X: also allow unix connections to
> @/tmp/.ICE-unix/[0-9]*, needed by (at least) firefox and thunderbird
> 
> Signed-off-by: Jamie Strandboge <jamie at canonical.com>

I'm surprised this didn't come up earlier.

Acked-by: Seth Arnold <seth.arnold at canonical.com>

Acked for both 2.9 and trunk.

Thanks

> ------------------------------------------------------------
> revno: 3209
> committer: Jamie Strandboge <jamie at ubuntu.com>
> branch nick: apparmor.wily-profile-updates
> timestamp: Fri 2015-07-24 12:24:57 -0500
> message:
>   profiles/apparmor.d/abstractions/X: also allow unix connections to
>   @/tmp/.ICE-unix/[0-9]*, needed by (at least) firefox and thunderbird
>   
>   Signed-off-by: Jamie Strandboge <jamie at canonical.com>
> diff:
> === modified file 'profiles/apparmor.d/abstractions/X'
> --- profiles/apparmor.d/abstractions/X	2015-03-25 21:58:31 +0000
> +++ profiles/apparmor.d/abstractions/X	2015-07-24 17:24:57 +0000
> @@ -27,6 +27,9 @@
>    unix (connect, receive, send)
>         type=stream
>         peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
> +  unix (connect, receive, send)
> +       type=stream
> +       peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
>  
>    /usr/include/X11/               r,
>    /usr/include/X11/**             r,


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150724/440df402/attachment.pgp>