Skip to content

Allow to read pulseaudio config subdirectories

Vincas Dargis requested to merge Talkless/apparmor:patch-1 into master

Fixes denied "/etc/pulse/client.conf.d/00-disable-autospawn.conf" read on Debian Sid.

audit.log entry on Debian Sid with Thunderbird:

type=AVC msg=audit(1511012066.035:570): apparmor="DENIED" operation="open" profile="thunderbird" name="/etc/pulse/client.conf.d/00-disable-autospawn.conf" pid=4507 comm="thunderbird" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 type=SYSCALL msg=audit(1511012066.035:570): arch=c000003e syscall=2 success=no exit=-13 a0=7f0fd625c780 a1=80000 a2=1b6 a3=80000 items=0 ppid=1538 pid=4507 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=3 comm="thunderbird" exe="/usr/lib/thunderbird/thunderbird" key=(null) type=PROCTITLE msg=audit(1511012066.035:570): proctitle="/usr/lib/thunderbird/thunderbird"

Can be reproduced by misconfiguring SMTP account in order to get alert message while sending email.

Edited by Christian Boltz

Merge request reports