[pkg-apparmor] Bug#766937: apparmor-profiles: Patch - abstraction profile for desktop themes and images

parspes parspes at gmail.com
Thu Oct 30 00:46:38 UTC 2014


  This access is neccessary for many GUI programs when Gnome is not
installed. I agree that it should be added to some other abstractions
if needed. The idea occurred to me that the code should have been in
the Freedesktop.org abstraction, or perhaps just a generic desktop
abstraction. My guess as to why it is not included is that it is not a
part of the Freedesktop.org specification.
 In my opinion, using the Gnome abstraction would not be appropriate
unless Gnome software and/or the Gnome Desktop is installed. Gnome
will not will not be installed on all workstations as there is a
variety of options available which Debian users may select for usage.
Also my
aa-logprof does not provide the Gnome abstraction as an option to
select for resolution, perhaps there are too few matching rules in the
Gnome abstraction to enable it.
 It seems a little contrary to the purpose of access control to be as
inclusive as possible with profiles, although this is indeed the
easiest methodology of ensuring functionality. There are already
available within the profiles packages provided by Debian many small
and separated abstractions. My primary concern is just getting this
functionality available in the best manner.



More information about the pkg-apparmor-team mailing list