8 Mar
2019
8 Mar
'19
09:57
http://bugzilla.suse.com/show_bug.cgi?id=1128467 http://bugzilla.suse.com/show_bug.cgi?id=1128467#c1 --- Comment #1 from Martin Wilck <martin.wilck@suse.com> --- The problem is in ghostscripts ijs_exec_server() command, which runs
argv[i++] = "sh"; argv[i++] = "-c"; argv[i++] = (char *)server_cmd; argv[i++] = NULL; status = execvp (argv[0], (char * const *)argv);
So that would require the apparmor profile to exec "sh", which would obviously forfeit all confinement. -- You are receiving this mail because: You are on the CC list for the bug.