[apparmor] [patch] profiles: add mir abstraction

[Steve Beattie]

As mir has come into use in Ubuntu touch and is available for testing on
Ubuntu desktop, confined apps need access to a few mir specific things.
This patch adds a mir abstraction.

Nominated for both trunk and 2.9.

Signed-off-by: Steve Beattie <steve at nxnw.org>
Bug-Ubuntu: https://launchpad.net/bugs/1422521
---
 profiles/apparmor.d/abstractions/mir |   16 ++++++++++++++++
 1 file changed, 16 insertions(+)

Index: b/profiles/apparmor.d/abstractions/mir
===================================================================
--- /dev/null
+++ b/profiles/apparmor.d/abstractions/mir
@@ -0,0 +1,17 @@
+# vim:syntax=apparmor
+# ------------------------------------------------------------------
+#
+#    Copyright (C) 2015 Canonical Ltd.
+#
+#    This program is free software; you can redistribute it and/or
+#    modify it under the terms of version 2 of the GNU General Public
+#    License published by the Free Software Foundation.
+#
+# ------------------------------------------------------------------
+
+  # mir libraries sometimes do not have a lib prefix
+  # see LP: #1422521
+  /usr/lib/@{multiarch}/mir/*.so* mr,
+  /usr/lib/@{multiarch}/mir/**/*.so* mr,
+
+  # unprivileged mir socket for clients
+  owner /{,var/}run/user/*/mir_socket rw,

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150305/b8a51d9f/attachment.pgp>