[apparmor] Allow totem access to dvd devices (/dev/sr*)

Austin English austinenglish at gmail.com
Mon Nov 2 03:43:07 UTC 2015


This is needed by Tails to enable DVD playback support:
See https://labs.riseup.net/code/issues/10455
and https://labs.riseup.net/code/issues/7674

This patch adds read permission to /dev/sr* for totem in all supported
versions.

Please review and merge. Once this is merged, it would be great to get this
into a release soon.

-- 
-Austin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20151101/b7590ef6/attachment.html>
-------------- next part --------------
=== modified file 'ubuntu/12.04/usr.bin.totem'
--- ubuntu/12.04/usr.bin.totem	2012-01-04 17:36:42 +0000
+++ ubuntu/12.04/usr.bin.totem	2015-11-02 03:23:04 +0000
@@ -12,6 +12,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
   # private-files-strict is in effect.

=== modified file 'ubuntu/14.04/usr.bin.totem'
--- ubuntu/14.04/usr.bin.totem	2014-07-16 19:43:11 +0000
+++ ubuntu/14.04/usr.bin.totem	2015-11-02 03:22:57 +0000
@@ -20,6 +20,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
   # private-files-strict is in effect.

=== modified file 'ubuntu/14.10/usr.bin.totem'
--- ubuntu/14.10/usr.bin.totem	2014-10-19 08:18:36 +0000
+++ ubuntu/14.10/usr.bin.totem	2015-11-02 03:22:50 +0000
@@ -13,6 +13,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
   # private-files-strict is in effect.

=== modified file 'ubuntu/15.04/usr.bin.totem'
--- ubuntu/15.04/usr.bin.totem	2015-08-12 12:00:00 +0000
+++ ubuntu/15.04/usr.bin.totem	2015-11-02 03:22:46 +0000
@@ -13,6 +13,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
   # private-files-strict is in effect.

=== modified file 'ubuntu/15.10/usr.bin.totem'
--- ubuntu/15.10/usr.bin.totem	2015-10-27 01:49:53 +0000
+++ ubuntu/15.10/usr.bin.totem	2015-11-02 03:22:41 +0000
@@ -13,6 +13,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
   # private-files-strict is in effect.

=== modified file 'ubuntu/16.04/usr.bin.totem'
--- ubuntu/16.04/usr.bin.totem	2015-10-27 01:49:53 +0000
+++ ubuntu/16.04/usr.bin.totem	2015-11-02 03:21:24 +0000
@@ -13,6 +13,7 @@
   /usr/include/**/pyconfig.h r,
 
   /usr/bin/totem r,
+  /dev/sr* r,
 
   # Allow read and write on anything in @{HOME}. Lenient, but
   # private-files-strict is in effect.



More information about the AppArmor mailing list