Bug#867143: evince: Please drop obsolete /dev/.udev/ support in the AppArmor profile

[intrigeri at debian.org]

Package: evince
Version: 3.22.1-3
Severity: wishlist
Tags: patch
User: pkg-apparmor-team at lists.alioth.debian.org
Usertags: modify-profile

Hi,

Michael Biebl said on
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846966#50 that
/dev/.udev/ "has long been deprecated and is not in use anymore since
at least jessie, might even be wheezy".

The following patch accordingly removes the corresponding rule from
the AppArmor profile we ship. To be on the safe side, I've tested on
sid that Evince still works fine once with this change applied.

Suggested debian/changelog entry:

 * apparmor-profile.abstraction: remove support for the obsolete
   /dev/.udev/ directory (Closes: #nnnnnn).

--- debian/apparmor-profile.abstraction	(revision 52576)
+++ debian/apparmor-profile.abstraction	(working copy)
@@ -17,7 +17,6 @@
   deny /run/udev/data/** r,
 
   # move out to the gnome abstraction if anyone else needs these
-  /dev/.udev/{data,db}/* r,
   /etc/udev/udev.conf r,
   /sys/devices/**/block/**/uevent r,

Thanks for considering & for maintaining Evince in Debian :)

Cheers!
-- 
intrigeri