summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorUlrike Uhlig <u@451f.org>2016-07-26 16:38:18 +0200
committerUlrike Uhlig <u@451f.org>2016-07-26 16:38:18 +0200
commit390d610d11855117e3a3305a155b1bccee4bf855 (patch)
tree55bedcdbb17a158bfa837463660fa9746162d6cc
parent52d4eeb3b131ba8bccd44b8c9b8b3d470329fbf2 (diff)
Update Icedove AppArmor profile from upstream.feature/11058+apparmor_icedove
In icedove45 with this profile enabled, the gpg2 subprofile wants to read enigmail.jar. Upstream commit: https://git.launchpad.net/~sdeziel/+git/apparmor-profiles/commit/?h=thunderbird-45-refresh&id=5cb3c94d0bce7c1421299a7b9d1c4c855a5dab12
-rw-r--r--config/chroot_local-includes/etc/apparmor.d/usr.bin.icedove2
1 files changed, 2 insertions, 0 deletions
diff --git a/config/chroot_local-includes/etc/apparmor.d/usr.bin.icedove b/config/chroot_local-includes/etc/apparmor.d/usr.bin.icedove
index 8fa892f..f20ecc1 100644
--- a/config/chroot_local-includes/etc/apparmor.d/usr.bin.icedove
+++ b/config/chroot_local-includes/etc/apparmor.d/usr.bin.icedove
@@ -229,6 +229,8 @@ profile icedove /usr/lib/icedove/icedove {
deny owner @{HOME}/.icedove/**/*.msf w,
deny owner @{HOME}/.cache/icedove/**/_CACHE_* w,
+ /usr/share/xul-ext/enigmail/chrome/enigmail.jar r,
+
# For smartcards?
/dev/bus/usb/ r,
/dev/bus/usb/[0-9]*/ r,