Package: icedove
Version: 1:45.4.0-1
Severity: minor
Tags: patch
X-Debbugs-Cc: u...@451f.org

Dear Maintainer,

As a KDE user I want Icedove to look like a native application despite
it using GTK, which can be achieved with the gtk2-engines-pixbuf package
and some gtk*-engines-* package (e.g. gtk3-engines-breeze). However, the
current Icedove AppArmor profile blocks the paths used by these packages.

The attached patch fixes the profile for me. A proper solution for
AppArmor upstream might be to add the new lines to the appropriate
abstraction file (perhaps abstractions/gnome?).

Cheers!

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages icedove depends on:
ii  debianutils               4.8.1
ii  fontconfig                2.11.0-6.7
ii  libasound2                1.1.2-1
ii  libatk1.0-0               2.22.0-1
ii  libc6                     2.24-5
ii  libcairo2                 1.14.6-1.1
ii  libdbus-1-3               1.10.12-1
ii  libdbus-glib-1-2          0.108-1
ii  libevent-2.0-5            2.0.21-stable-2.1
ii  libffi6                   3.2.1-6
ii  libfontconfig1            2.11.0-6.7
ii  libfreetype6              2.6.3-3+b1
ii  libgcc1                   1:6.2.0-13
ii  libgdk-pixbuf2.0-0        2.36.0-1
ii  libglib2.0-0              2.50.2-1
ii  libgtk2.0-0               2.24.31-1
ii  libhunspell-1.4-0         1.4.1-2+b1
ii  libicu57                  57.1-4
ii  libnspr4                  2:4.12-6
ii  libnss3                   2:3.26.2-1
ii  libpango-1.0-0            1.40.3-3
ii  libpangocairo-1.0-0       1.40.3-3
ii  libpangoft2-1.0-0         1.40.3-3
ii  libpixman-1-0             0.34.0-1
ii  libsqlite3-0              3.15.1-1
ii  libstartup-notification0  0.12-4
ii  libstdc++6                6.2.0-13
ii  libvpx4                   1.6.0-3
ii  libx11-6                  2:1.6.3-1
ii  libxcomposite1            1:0.4.4-1
ii  libxdamage1               1:1.1.4-2+b1
ii  libxext6                  2:1.3.3-1
ii  libxfixes3                1:5.0.2-1
ii  libxrender1               1:0.9.9-2
ii  libxt6                    1:1.1.5-1
ii  psmisc                    22.21-2.1+b1
ii  zlib1g                    1:1.2.8.dfsg-2+b3

Versions of packages icedove recommends:
ii  hunspell-en-gb [hunspell-dictionary]  1:5.2.3-1
ii  hunspell-en-us [hunspell-dictionary]  20070829-6
ii  iceowl-extension                      1:45.4.0-1

Versions of packages icedove suggests:
ii  apparmor          2.10.95-6
ii  fonts-lyx         2.2.0-2
ii  libgssapi-krb5-2  1.15~beta1-1

-- Configuration Files:
/etc/apparmor.d/usr.bin.icedove changed [not included]

-- no debconf information
From 834472a72adfc922bf47e34cc6ff155956f9269c Mon Sep 17 00:00:00 2001
From: anonym <ano...@riseup.net>
Date: Sat, 19 Nov 2016 11:59:21 +0100
Subject: [PATCH] AppArmor profile: allow gtk-engines-bixbuf and themes.

This will give Icedove a native look in e.g. KDE (if something like
gtk3-engines-breeze is installed), instead of a look reminding us of the
aestethics found in Windows 95.
---
 debian/apparmor/usr.bin.icedove | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/debian/apparmor/usr.bin.icedove b/debian/apparmor/usr.bin.icedove
index ba023cd..96abeec 100644
--- a/debian/apparmor/usr.bin.icedove
+++ b/debian/apparmor/usr.bin.icedove
@@ -175,6 +175,10 @@ profile icedove /usr/lib/icedove/icedove {
   /bin/uname Uxr,
   /usr/bin/locale Uxr,
 
+  # Theme support for desktop environments not based on GTK
+  /usr/lib/@{multiarch}/gtk-*/*/engines/libpixmap.so* mr,
+  /usr/share/themes/** r,
+
   /usr/bin/gpg Cx -> gpg,
 
   profile gpg {
-- 
2.10.2

Reply via email to