Your message dated Mon, 8 Mar 2021 20:51:30 +0100
with message-id <5d1d3bc2-1fb1-77f8-0297-c8fafd8d1...@debian.org>
and subject line Re: Bug#982274: usr.lib.libreoffice.program.soffice.bin:
temporary files are not allowed due to length change
has caused the Debian Bug report #982274,
regarding usr.lib.libreoffice.program.soffice.bin: temporary files are not
allowed due to length change
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
982274: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982274
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libreoffice-common
Version: 1:7.0.4-3
Severity: important
File: /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin
Usertags: apparmor
Tags: patch
When I open a document in my home directory in libreoffice I get this:
Feb 08 08:08:48 audit[474619]: AVC apparmor="DENIED" operation="open"
profile="libreoffice-soffice" name="/home/pabs/lu474619vthyvt.tmp" pid=474619
comm="soffice.bin" requested_mask="wrc" denied_mask="wrc" fsuid=1000 ouid=1000
The reason is that this rule allowing temporary files is too short:
owner @{libo_user_dirs}/{,**/}lu??????????{,?}.tmp rwk, #Temporary file
used when saving
Adding one more possible temporary filename length fixes the denial:
owner @{libo_user_dirs}/{,**/}lu??????????{,?,??}.tmp rwk, #Temporary file
used when saving
I expect that just switching to a wildcard would work too and would be
much more likely to continue working if LibreOffice update the length.
owner @{libo_user_dirs}/{,**/}lu??????????*.tmp rwk, #Temporary file used
when saving
-- Package-specific info:
-- System Information:
Debian Release: bullseye/sid
APT prefers testing-debug
APT policy: (900, 'testing-debug'), (900, 'testing'), (800,
'unstable-debug'), (800, 'unstable'), (790, 'buildd-unstable'), (700,
'experimental-debug'), (700, 'experimental'), (690, 'buildd-experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-3-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_FIRMWARE_WORKAROUND
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8), LANGUAGE=en_AU:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libreoffice-common depends on:
ii libnumbertext-data 1.0.7-1
ii libreoffice-style-colibre 1:7.0.4-3
ii ucf 3.0043
ii ure 1:7.0.4-3
Versions of packages libreoffice-common recommends:
ii apparmor 2.13.6-7
pn fonts-liberation2 | ttf-mscorefonts-installer <none>
ii libexttextcat-data 3.4.5-1
ii python3-uno 1:7.0.4-3
ii xdg-utils 1.1.3-2
Versions of packages libreoffice-common suggests:
ii libreoffice-style-colibre [libreoffice-style] 1:7.0.4-3
Versions of packages python3-uno depends on:
ii libc6 2.31-9
ii libgcc-s1 10.2.1-6
ii libpython3.9 3.9.1-3
ii libreoffice-core 1:7.0.4-3
ii libstdc++6 10.2.1-6
ii libuno-cppu3 1:7.0.4-3
ii libuno-cppuhelpergcc3-3 1:7.0.4-3
ii libuno-sal3 1:7.0.4-3
ii libuno-salhelpergcc3-3 1:7.0.4-3
ii python3 3.9.1-1
ii python3.9 3.9.1-3
ii ucf 3.0043
ii uno-libs-private 1:7.0.4-3
-- no debconf information
--
bye,
pabs
https://wiki.debian.org/PaulWise
signature.asc
Description: This is a digitally signed message part
--- End Message ---
--- Begin Message ---
Version: 1:7.1.1~rc1-1
Hi,
Am 08.03.21 um 19:04 schrieb Vincas Dargis:
> Control: reopen -1
>
> I see this bug marked as Done but I just got denial today:
>
Yes, it is done.
In 7.1. As the version tracking info clearly showed.
Bugs get -done'd in Debian when the fix gets uploaded/accepted and the
version tracking knows what version is affected.
> type=AVC msg=audit(1615225628.771:1363): apparmor="DENIED"
> operation="mknod" profile="libreoffice-soffice"
> name="/home/vincas/Dokumentai/lu4638vdjw1.tmp" pid=4638
> comm="soffice.bin" requested_mask="c" denied_mask="c" fsuid=1000
> ouid=1000FSUID="vincas" OUID="vincas"
>
Just because you enable the profile. That's not what the default is so
there's no pressing need to fix this for 7.0.4.
> Changing rule into this:
>
> owner @{libo_user_dirs}/{,**/}lu?????????{,?,??}.tmp rwk, #Temporary
> file used when saving
>
> Did the trick (needed 9 symbol variant).
As was done.
If you would actually have read the bug you would have seen that.
No one claimed this was fixed in 7.0.4.
7.0.x is in freeze. (It is in git for 7.0.x though should there ever be
an upload,)
Regards,
Rene
--- End Message ---
