apparmor/abstractions-X-xauth-mr582.diff
Christian Boltz d925988ada Accepting request 821970 from home:cboltz
- add abstractions-X-xauth-mr582.diff to allow reading the xauth file
  from its new sddm location (boo#1174290, boo#1174293)

OBS-URL: https://build.opensuse.org/request/show/821970
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=268
2020-07-20 18:53:52 +00:00

32 lines
1.1 KiB
Diff

commit 02b9090edab82021f5e2ecc7f2f4a5fc877949db
Author: Christian Boltz <apparmor@cboltz.de>
Date: Mon Jul 20 20:35:41 2020 +0200
abstractions/X: add another xauth path
Future sddm version will use $XDG_RUNTIME_DIR/xauth_XXXXXX
References:
- https://bugzilla.opensuse.org/show_bug.cgi?id=1174290
- https://bugzilla.suse.com/show_bug.cgi?id=1174293
- https://github.com/sddm/sddm/pull/1230
- https://github.com/jonls/redshift/issues/763
This is the 2.13 version of 35f033ca7c0dbd03111a54ea50b3f2713b9d5584 /
https://gitlab.com/apparmor/apparmor/-/merge_requests/581
The difference is that this commit avoids using the @{run} variable.
diff --git a/profiles/apparmor.d/abstractions/X b/profiles/apparmor.d/abstractions/X
index 1eca218d..e903861a 100644
--- a/profiles/apparmor.d/abstractions/X
+++ b/profiles/apparmor.d/abstractions/X
@@ -24,6 +24,7 @@
owner /{,var/}run/lightdm/*/xauthority r,
owner /{,var/}run/user/*/gdm/Xauthority r,
owner /{,var/}run/user/*/X11/Xauthority r,
+ owner /{,var/}run/user/*/xauth_* r,
# the unix socket to use to connect to the display
/tmp/.X11-unix/* rw,