mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
17cb8f0418
[Fontmatrix] [adds ~/.Fontmatrix/Activated to fonts.conf]. This causes
programs which use [Fontconfig] (directly or indirectly through
libraries such as [pango]) to include that directory in their font
search path, which causes errors such as:
audit: type=1400 audit(1602678958.525:53): apparmor="DENIED" operation="open" profile="fr.emersion.Mako" name="/home/username/.Fontmatrix/Activated/.uuid" pid=48553 comm="mako" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
audit: type=1400 audit(1602678958.525:54): apparmor="DENIED" operation="open" profile="fr.emersion.Mako" name="/home/username/.Fontmatrix/Activated/" pid=48553 comm="mako" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
if the program does not explicitly include this directory in its
AppArmor profile. As with other common font locations, add
~/.Fontmatrix/Activated to the fonts abstraction for read-only access.
[Fontconfig]: https://gitlab.freedesktop.org/fontconfig/fontconfig
[Fontmatrix]: https://github.com/fontmatrix/fontmatrix
[Pango]: https://pango.gnome.org/
[adds ~/.Fontmatrix/Activated to fonts.conf]: https://github.com/fontmatrix/fontmatrix/blob/75552e2/src/typotek.cpp#L1081-L1088
Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
68 lines
2.2 KiB
Text
68 lines
2.2 KiB
Text
# vim:syntax=apparmor
|
|
# ------------------------------------------------------------------
|
|
#
|
|
# Copyright (C) 2002-2009 Novell/SUSE
|
|
# Copyright (C) 2009 Canonical Ltd.
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License published by the Free Software Foundation.
|
|
#
|
|
# ------------------------------------------------------------------
|
|
|
|
abi <abi/3.0>,
|
|
|
|
/usr/share/AbiSuite/fonts/** r,
|
|
|
|
/usr/lib/xorg/modules/fonts/**.so* mr,
|
|
|
|
/usr/share/fonts/{,**} r,
|
|
/usr/share/fonts-*/{,**} r,
|
|
|
|
/etc/fonts/** r,
|
|
# Debian, openSUSE paths are different
|
|
/usr/share/{fontconfig,fonts-config,*-fonts}/conf.avail/{,**} r,
|
|
/usr/share/ghostscript/fonts/{,**} r,
|
|
|
|
/opt/kde3/share/fonts/** r,
|
|
|
|
/usr/lib{,32,64}/openoffice/share/fonts/** r,
|
|
|
|
/var/cache/fonts/** r,
|
|
/var/cache/fontconfig/** mr,
|
|
/var/lib/defoma/** mr,
|
|
|
|
/usr/share/a2ps/fonts/** r,
|
|
/usr/share/xfce/fonts/** r,
|
|
/usr/share/ghostscript/fonts/** r,
|
|
/usr/share/javascript/*/fonts/** r,
|
|
/usr/share/texmf/{,*/}fonts/** r,
|
|
/usr/share/texlive/texmf-dist/fonts/** r,
|
|
/var/lib/ghostscript/** r,
|
|
|
|
owner @{HOME}/.fonts.conf r,
|
|
owner @{HOME}/.fonts/ r,
|
|
owner @{HOME}/.fonts/** r,
|
|
owner @{HOME}/.local/share/fonts/ r,
|
|
owner @{HOME}/.local/share/fonts/** r,
|
|
owner @{HOME}/.fonts.cache-2 mr,
|
|
owner @{HOME}/.{,cache/}fontconfig/ rw,
|
|
owner @{HOME}/.{,cache/}fontconfig/** mrl,
|
|
owner @{HOME}/.fonts.conf.d/ r,
|
|
owner @{HOME}/.fonts.conf.d/** r,
|
|
owner @{HOME}/.config/fontconfig/ r,
|
|
owner @{HOME}/.config/fontconfig/** r,
|
|
owner @{HOME}/.Fontmatrix/Activated/ r,
|
|
owner @{HOME}/.Fontmatrix/Activated/** r,
|
|
|
|
/usr/local/share/fonts/ r,
|
|
/usr/local/share/fonts/** r,
|
|
|
|
# poppler CMap tables
|
|
/usr/share/poppler/cMap/** r,
|
|
|
|
# data files for LibThai
|
|
/usr/share/libthai/thbrk.tri r,
|
|
|
|
# Include additions to the abstraction
|
|
include if exists <abstractions/fonts.d>
|