[apparmor] [patch] allow reading /tmp/.X11-unix/* in abstractions/X

[Christian Boltz]

Hello,

$subject.

This is needed when starting X with "-nolisten local".


References: https://bugs.launchpad.net/apparmor/+bug/1589823


I propose this patch for trunk, 2.10 and 2.9



[ abstractions-X.diff ]

=== modified file 'profiles/apparmor.d/abstractions/X'
--- profiles/apparmor.d/abstractions/X  2015-07-24 20:01:46 +0000
+++ profiles/apparmor.d/abstractions/X  2016-10-13 20:03:24 +0000
@@ -23,7 +23,7 @@
   owner /{,var/}run/user/*/gdm/Xauthority r,
 
   # the unix socket to use to connect to the display
-  /tmp/.X11-unix/*           w,
+  /tmp/.X11-unix/* rw,
   unix (connect, receive, send)
        type=stream
        peer=(addr="@/tmp/.X11-unix/X[0-9]*"),



Regards,

Christian Boltz
-- 
"Never surf faster, than your guardian penguin can fly!"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161013/e43ac0a1/attachment.pgp>