Skip to content
  • intrigeri's avatar
    base abstraction: allow mr on *.so* in common library paths. · 5cbb7df9
    intrigeri authored
    For example, VirtualBox guests have /usr/lib/VBoxOGL.so.
    
    Without this changes, in a VirtualBox VM with VBoxVGA graphics,
    at least one Qt5 application (OnionShare) won't start and display:
    
      ImportError: libGL.so.1: failed to map segment from shared object
    
    … and the system logs have:
    
      apparmor="DENIED" operation="file_mmap" profile="/usr/bin/onionshare-gui" name="/usr/lib/VBoxOGL.so" pid=11415 comm="onionshare-gui" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
    
    While this works fine with VBoxSVGA and VMSVGA when 3D acceleration is enabled.
    
    So let's not assume all libraries have a name that starts with "lib".
    5cbb7df9