* debian/patches:

  - 02_fix-apparmor-profile updated, fix chromium path in apparmor
    abstraction profile.                                      closes: #742829

git-svn-id: svn://anonscm.debian.org/pkg-xfce/goodies/trunk/lightdm@8425 0c9b3bff-18ee-0310-b944-d1aa2700132f

diff --git a/debian/changelog b/debian/changelog
index 7ea260eefaa133a02a265ac343267396a49a562f..1edff5fdec7e1aa57c5ad837c5a6a88f2708aa26 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+lightdm (1.10.1-2) UNRELEASED; urgency=medium
+
+  * debian/patches:
+    - 02_fix-apparmor-profile updated, fix chromium path in apparmor
+      abstraction profile.                                      closes: #742829
+
+ -- Yves-Alexis Perez <corsac@debian.org>  Tue, 06 May 2014 23:08:42 +0200
+
 lightdm (1.10.1-1) unstable; urgency=medium
 
   * New upstream release.

diff --git a/debian/patches/02_fix-apparmor-profile.patch b/debian/patches/02_fix-apparmor-profile.patch
index 83448712ea0f769f9f7435e679051bd45df7795e..8223f8c734f35d8fed6e9ae1fa3ee05925f38d03 100644 (file)
--- a/debian/patches/02_fix-apparmor-profile.patch
+++ b/debian/patches/02_fix-apparmor-profile.patch
@@ -24,3 +24,21 @@
  
    # silence warnings for stuff that we really don't want to grant
    deny capability dac_override,
+--- a/data/apparmor/abstractions/lightdm_chromium-browser
++++ b/data/apparmor/abstractions/lightdm_chromium-browser
+@@ -8,6 +8,7 @@
+ # provided in abstractions/lightdm, this abstraction must be separate from
+ # abstractions/lightdm.
+ 
++  /usr/lib/chromium/chromium Cx -> chromium,
+   /usr/lib/chromium-browser/chromium-browser Cx -> chromium,
+   /usr/bin/webapp-container Cx -> chromium,
+   /usr/bin/webbrowser-app Cx -> chromium,
+@@ -53,6 +54,7 @@
+ 
+     /selinux/ r,
+ 
++    /usr/lib/chromium/chrome-sandbox ix,
+     /usr/lib/chromium-browser/chromium-browser-sandbox ix,
+     /usr/lib/@{multiarch}/oxide-qt/chrome-sandbox ix,
+     /opt/google/chrome-*/chrome-sandbox ix,