debian/patches/08_apparmor-updates.patch

   1 Author: Jamie Strandboge <jamie@canonical.com>
   2 Description: allow 'rw' on /etc/compizconfig/unity.ini (continue workaround for
   3  LP: 697678). Allow read of @{PROC}/sys/vm/overcommit_memory. Allow write to
   4  /run/uuidd/request.
   5
   6 Index: lightdm-1.11.9/data/apparmor/abstractions/lightdm
   7 ===================================================================
   8 --- lightdm-1.11.9.orig/data/apparmor/abstractions/lightdm
   9 +++ lightdm-1.11.9/data/apparmor/abstractions/lightdm
  10 @@ -14,7 +14,10 @@
  11    #include <abstractions/dbus-accessibility>
  12    #include <abstractions/nameservice>
  13    #include <abstractions/wutmp>
  14 -  /etc/compizconfig/config rw, # bug in compiz https://launchpad.net/bugs/697678
  15 +
  16 +  # bug in compiz https://launchpad.net/bugs/697678
  17 +  /etc/compizconfig/config rw,
  18 +  /etc/compizconfig/unity.ini rw,
  19
  20    / r,
  21    /bin/ rmix,
  22 @@ -44,6 +47,7 @@
  23    @{PROC}/asound/** rm,
  24    @{PROC}/ati rm,
  25    @{PROC}/ati/** rm,
  26 +  @{PROC}/sys/vm/overcommit_memory r,
  27    owner @{PROC}/** rm,
  28    # needed for gnome-keyring-daemon
  29    @{PROC}/*/status r,
  30 @@ -68,6 +72,7 @@
  31    # necessary for writing to sockets, etc.
  32    /{,var/}run/** rmkix,
  33    /{,var/}run/shm/** wl,
  34 +  /{,var/}run/uuidd/request w,
  35    # libpam-xdg-support/logind
  36    owner /{,var/}run/user/*/** rw,
  37