diff --git a/colord.changes b/colord.changes index 915a559..9df13fc 100644 --- a/colord.changes +++ b/colord.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Dec 22 16:52:20 UTC 2014 - fcrozat@suse.com + +- Update apparmor profile for USB profiling [boo#901148]. + ------------------------------------------------------------------- Tue Dec 16 10:48:19 UTC 2014 - dimstar@opensuse.org diff --git a/usr.lib.colord b/usr.lib.colord index 9b2e715..7c00eac 100644 --- a/usr.lib.colord +++ b/usr.lib.colord @@ -10,16 +10,22 @@ deny /usr/share/gvfs/remote-volume-monitors/afc.monitor r, deny /usr/share/gvfs/remote-volume-monitors/udisks2.monitor r, + /dev/ r, + /dev/bus/usb/ r, + /dev/bus/usb/[0-9]*/[0-9]* rw, /etc/colord.conf r, /etc/fstab r, /etc/udev/hwdb.bin r, /etc/udev/udev.conf r, + /proc/*/fd/ r, + /proc/*/mountinfo r, /proc/*/mounts r, /proc/*/cgroup r, /proc/*/cmdline r, # not only @{pid}, bnc#846301 /run/systemd/sessions/[0-9]* r, /run/systemd/sessions/c[0-9]* r, /run/udev/data/* r, + /run/udev/queue.bin r, /sys/bus/ r, /sys/bus/usb/devices/ r, /sys/class/ r, @@ -27,6 +33,7 @@ /sys/class/video4linux/** r, /sys/class/video4linux/ r, /sys/devices/** r, + /usr/bin/spotread ix, # inherit colord profile, needed to support USB colorimeter not natively supported by colord /usr/lib/colord mr, /usr/local/share/mime/** r, /usr/share/color/**/ r,