[pkg-apparmor] Bug#882048: Bug#882048: Re: Bug#882048: apparmor should let thunderbird use signatures from files

[Seth Arnold]

On Sat, Nov 25, 2017 at 05:23:16PM +0200, Vincas Dargis wrote:
> $ sudo sysdig "proc.name=thunderbird and fd.name=/home/vincas/.vimrc"
> 257671 17:14:42.523705164 7 thunderbird (8712) < open
> fd=69(<f>/home/vincas/.vimrc) name=/home/vincas/.vimrc flags=1(O_RDONLY)
> mode=0

> So glib/gio libraries not just opens, it actually reads these files
> visible in file dialog. Twice!

This is likely to be intentional: I'm guessing it's part of thumbnailing
the contents, or selecting the proper icon after running each file through
something like libmagic.

Can sysdig grab stacktraces at the time of the open() call? It might be
educational to find out what exactly is doing the reading.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-apparmor-team/attachments/20171127/bfabb365/attachment.sig>