[apparmor] Allow totem access to dvd devices (/dev/sr*)

[Seth Arnold]

On Mon, Nov 09, 2015 at 06:55:09PM -0800, John Johansen wrote:
> On 11/01/2015 07:43 PM, Austin English wrote:
> > This is needed by Tails to enable DVD playback support:
> > See https://labs.riseup.net/code/issues/10455
> > and https://labs.riseup.net/code/issues/7674
> > 
> > This patch adds read permission to /dev/sr* for totem in all supported versions.
> > 
> > Please review and merge. Once this is merged, it would be great to get this into a release soon.
> > 
> The change it self is pretty simple. I'm not a fan of adding the direct hw
> access but if that is what totem is doing it will be required. I think
> I would rather put it in an abstraction but I don't see a proper one to
> put it in atm, I don't think that should stop it from going in
> 
> Seth what do you think?

I don't know which abstraction that currently exists would be suitable for
raw device accesses. We could make a new abstraction, but /dev/sr* on one
system may be a bluray player but elsewhere might be a tape robot with
backups. Putting a device into an abstraction slightly hides it.

I think I'd rather keep it to just totem.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20151112/5457eb8c/attachment.pgp>