[pkg-apparmor] Bug#879900: apparmor-profiles-extra: Totem segfaults when apparmor profile is enforced

[intrigeri]

Control: tag -1 - moreinfo
Control: tag -1 + upstream
Control: forwarded -1 https://code.launchpad.net/~intrigeri/apparmor-profiles/+git/apparmor-profiles/+merge/332963
Control: tag -1 + pending

Jason Wittlin-Cohen:
> Adding  #include <abstractions/nvidia> to /etc/apparmor.d/local/usr.bin.totem
> fixed the issue. I am now able to open Totem and play videos.

Cool, thank you for testing.

I've proposed this fix upstream and imported it in the Debian
packaging. I'll upload once 1.15 has migrated to testing, which should
happen within 1-2 days.

> I still see some apparmor DENY messages in the logs, but they
> seem unrelated.

Well, it's always annoying to have such logs because it makes it
harder to identify the root cause for other, real bugs. So feel free
to file a dedicated bug report about this. And if you want to try to
fix it yourself, I'll be happy to review your work :) Hint: the ".gl"
thing looks suspiciously like OpenGL so it might be something that's
legitimately accessed when using the NVIDIA drivers.

Cheers!