[pkg-apparmor] Bug#874665: <abstractions/audio>: allow reading OpenAL HRTFs

[Simon McVittie]

Package: apparmor
Version: 2.11.0-10
Severity: minor
Tags: patch

When running Quake III Arena (OpenArena is probably also affected) with
a recent OpenAL:

Sep 08 14:52:08 perpetual kernel: audit: type=1400 audit(1504878728.639:200): apparmor="ALLOWED" operation="open" profile="/usr/lib/ioquake3/ioquake3" name="/usr/share/openal/hrtf/" pid=3751 comm="ioquake3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Sep 08 14:52:08 perpetual kernel: audit: type=1400 audit(1504878728.639:201): apparmor="ALLOWED" operation="open" profile="/usr/lib/ioquake3/ioquake3" name="/usr/share/openal/hrtf/default-44100.mhr" pid=3751 comm="ioquake3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Sep 08 14:52:08 perpetual kernel: audit: type=1400 audit(1504878728.645:202): apparmor="ALLOWED" operation="open" profile="/usr/lib/ioquake3/ioquake3" name="/usr/share/openal/hrtf/default-48000.mhr" pid=3751 comm="ioquake3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

These files are "head-related transfer function" data sets, used by
OpenAL for better spatialization of sounds when headphones are detected.
I think <abstractions/audio> should allow reading them.

--- /etc/apparmor.d/abstractions/audio.dpkg-dist	2017-09-08 15:17:21.075148412 +0100
+++ /etc/apparmor.d/abstractions/audio	2017-09-08 15:17:42.619138139 +0100
@@ -68,6 +68,8 @@
 # openal
 /etc/openal/alsoft.conf r,
 owner @{HOME}/.alsoftrc r,
+/usr/{,local/}share/openal/hrtf/{,**} r,
+owner @{HOME}/.local/share/openal/hrtf/{,**} r,
 
 # wildmidi
 /etc/wildmidi/wildmidi.cfg r,


Regards,
    S