[apparmor] Allow totem access to dvd devices (/dev/sr*)
Austin English
austinenglish at gmail.com
Mon Nov 2 03:43:07 UTC 2015
This is needed by Tails to enable DVD playback support:
See https://labs.riseup.net/code/issues/10455
and https://labs.riseup.net/code/issues/7674
This patch adds read permission to /dev/sr* for totem in all supported
versions.
Please review and merge. Once this is merged, it would be great to get this
into a release soon.
--
-Austin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20151101/b7590ef6/attachment.html>
-------------- next part --------------
=== modified file 'ubuntu/12.04/usr.bin.totem'
--- ubuntu/12.04/usr.bin.totem 2012-01-04 17:36:42 +0000
+++ ubuntu/12.04/usr.bin.totem 2015-11-02 03:23:04 +0000
@@ -12,6 +12,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
# private-files-strict is in effect.
=== modified file 'ubuntu/14.04/usr.bin.totem'
--- ubuntu/14.04/usr.bin.totem 2014-07-16 19:43:11 +0000
+++ ubuntu/14.04/usr.bin.totem 2015-11-02 03:22:57 +0000
@@ -20,6 +20,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
# private-files-strict is in effect.
=== modified file 'ubuntu/14.10/usr.bin.totem'
--- ubuntu/14.10/usr.bin.totem 2014-10-19 08:18:36 +0000
+++ ubuntu/14.10/usr.bin.totem 2015-11-02 03:22:50 +0000
@@ -13,6 +13,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
# private-files-strict is in effect.
=== modified file 'ubuntu/15.04/usr.bin.totem'
--- ubuntu/15.04/usr.bin.totem 2015-08-12 12:00:00 +0000
+++ ubuntu/15.04/usr.bin.totem 2015-11-02 03:22:46 +0000
@@ -13,6 +13,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
# private-files-strict is in effect.
=== modified file 'ubuntu/15.10/usr.bin.totem'
--- ubuntu/15.10/usr.bin.totem 2015-10-27 01:49:53 +0000
+++ ubuntu/15.10/usr.bin.totem 2015-11-02 03:22:41 +0000
@@ -13,6 +13,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
# private-files-strict is in effect.
=== modified file 'ubuntu/16.04/usr.bin.totem'
--- ubuntu/16.04/usr.bin.totem 2015-10-27 01:49:53 +0000
+++ ubuntu/16.04/usr.bin.totem 2015-11-02 03:21:24 +0000
@@ -13,6 +13,7 @@
/usr/include/**/pyconfig.h r,
/usr/bin/totem r,
+ /dev/sr* r,
# Allow read and write on anything in @{HOME}. Lenient, but
# private-files-strict is in effect.
More information about the AppArmor
mailing list