Mailinglist Archive: opensuse-bugs (6499 mails)

< Previous Next >
[Bug 1134327] Enhance Ghostscript apparmor profile for ps2epsi
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Thu, 04 Jul 2019 14:06:57 +0000
  • Message-id: <>

--- Comment #20 from Johannes Meixner <jsmeix@xxxxxxxx> ---
Offhandedly I see the issues:

I know basically nothing about Ghostscript internals
but I think in general a library can be considered
as a program with many "entry points" where each function
that is provided by the library is such an "entry point".

Accordingly to limit what inside a library can be done
the limitation must happen at all its "entry points"
i.e. for all its functions that can be called "from outside".

I know absolutely nothing about programming with libapparmor.
I wonder how to switch back to the AppArmor profile before
i.e. I think things should happen basically like this:

1. save current AppArmor profile
2. add Ghostscript restrictions to the current AppArmor profile
3. do the actual Ghostscript functionality
4. restore the saved AppArmor profile

When the Ghostscript library calls functions in libapparmor
there would be a hard requirement of AppArmor by Ghostscript
but some users do not like to have any AppArmor stuff,
see bug #1134289

You are receiving this mail because:
You are on the CC list for the bug.
< Previous Next >
This Thread
  • No further messages