Bug ID 1128607
Summary gs profile should have a profile name
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component AppArmor
Assignee jsegitz@suse.com
Reporter suse-beta@cboltz.de
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Please change

profile
/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}
{

to

profile ghostscript
/usr/bin/{dvipdf,eps2eps,gs,gsbj,gsdj,gsdj500,gslj,gslp,gsnd,ps2ascii,ps2epsi,ps2pdf,ps2pdf12,ps2pdf13,ps2pdf14,ps2pdfwr,ps2ps,ps2ps2}
{

In case you overlooked it: the actual diff is

-profile /usr/bin/...
+profile ghostscript /usr/bin/...

This has the advantage that you'll get a much more readable profile name in
audit.log, aa-status output, ps Zaux etc., and avoids problems if you ever have
to add another executable to the attachment.

Please also rename /etc/apparmor.d/usr.bin.gs to /etc/apparmor.d/ghostscript.


You are receiving this mail because: