[Bug 1177621] New: Redshift's apparmor rule blocks reading a symlinked configuration file
https://bugzilla.suse.com/show_bug.cgi?id=1177621 Bug ID: 1177621 Summary: Redshift's apparmor rule blocks reading a symlinked configuration file Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs@suse.de Reporter: dcermak@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- I have my redshift configuration symlinked to /home/dan/.config/redshift/redshift.conf from /home/dan/dotfiles/xorg/.config/redshift/redshift.conf. However, the apparmor rule that is shipped with redshift, prevents it from actually reading the configuration file as revealed by strace: openat(AT_FDCWD, "/home/dan/.config/redshift/redshift.conf", O_RDONLY) = -1 EACCES (Permission denied) Could the apparmor rule be extended to allow to follow symlinks? Also, I am wondering if this is a regression, since I was using redshift for a few years without issues and this broke just recently (after a reinstall so not sure what the cause was here) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1177621 Dan Čermák <dcermak@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcermak@suse.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1177621 Chenzi Cao <chcao@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs@suse.de |masterpatricko@gmail.com -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1177621 https://bugzilla.suse.com/show_bug.cgi?id=1177621#c1 Tejas Guruswamy <masterpatricko@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #1 from Tejas Guruswamy <masterpatricko@gmail.com> --- AppArmor can never follow symlinks, by design unfortunately. So I don't think there can be any global fix (except disable apparmor). Instead I suggest adding modifications to /etc/apparmor.d/local/usr.bin.redshift probably you need to add something like owner @{HOME}/dotfiles/xorg/.config/redshift/redshift.conf r The AppArmor profile in the oS package was included for the last two years. I suspect AppArmor (for redshift at least) was simply not working on your previous installation for some reason. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com