committing changes in /etc made by "/usr/bin/apt full-upgrade -y"

author Frank Brehm <frank@brehm-online.com>

Sun, 23 Aug 2020 15:08:11 +0000 (17:08 +0200)

committer Frank Brehm <root@bruni.home.brehm-online.com>

Sun, 23 Aug 2020 15:08:11 +0000 (17:08 +0200)
author Frank Brehm <frank@brehm-online.com>
Sun, 23 Aug 2020 15:08:11 +0000 (17:08 +0200)
committer Frank Brehm <root@bruni.home.brehm-online.com>
Sun, 23 Aug 2020 15:08:11 +0000 (17:08 +0200)
diff --git a/apparmor.d/usr.lib.libreoffice.program.senddoc b/apparmor.d/usr.lib.libreoffice.program.senddoc

index a0f5bf685f90a598221f7b0bbb768a094e72f7ee..75ae73fe80169b8a19786e90683ab51951cb2660 100644 (file)
--- a/apparmor.d/usr.lib.libreoffice.program.senddoc
+++ b/apparmor.d/usr.lib.libreoffice.program.senddoc
@@ -17,8 +17,8 @@
  profile libreoffice-senddoc /usr/lib/libreoffice/program/senddoc {
    #include <abstractions/base>
  
-  owner /tmp/lu**       rw,    #makes files like luRRRRR.tmp/lubRRRR.tmp where R is random
-                               #Note, usually it's lub or luc, don't know why.
+  #include <abstractions/user-tmp>
+
    /{usr/,}bin/sh        rmix,
    /{usr/,}bin/bash      rmix,
    /{usr/,}bin/dash      rmix,
diff --git a/apparmor.d/usr.lib.libreoffice.program.soffice.bin b/apparmor.d/usr.lib.libreoffice.program.soffice.bin

index 7385db98d0645ea9c07421738232d5098465be5f..5715b23cab7aca0d46079d8284f26c176c748feb 100644 (file)
--- a/apparmor.d/usr.lib.libreoffice.program.soffice.bin
+++ b/apparmor.d/usr.lib.libreoffice.program.soffice.bin
@@ -95,6 +95,9 @@ profile libreoffice-soffice /usr/lib/libreoffice/program/soffice.bin flags=(comp
  # #include <abstractions/gnupg>
    #include <abstractions/python>
    #include <abstractions/p11-kit>
+
+  #include <abstractions/user-tmp>
+
    #include <abstractions/opencl-intel>
    #include <abstractions/opencl-mesa>
    #include <abstractions/opencl-nvidia>
@@ -123,7 +126,6 @@ profile libreoffice-soffice /usr/lib/libreoffice/program/soffice.bin flags=(comp
    owner @{HOME}/.config/soffice.binrc.lock rwk,
    owner @{HOME}/.cache/fontconfig/**    rw,
    owner @{HOME}/.config/gtk-???/bookmarks r,  #Make bookmarks work
-  owner /tmp/psp[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]* rw, #/tmp/psp1534203998 (printing to file)
  
    owner /{,var/}run/user/*/dconf/user   rw,
    owner @{HOME}/.config/dconf/user      r,
diff --git a/apparmor.d/usr.lib.libreoffice.program.xpdfimport b/apparmor.d/usr.lib.libreoffice.program.xpdfimport

index c3f486f69e07434ce0a39d27ab9c244ebbeabdfb..bdfc557260d287411bfc40bb97baa091041a2f53 100644 (file)
--- a/apparmor.d/usr.lib.libreoffice.program.xpdfimport
+++ b/apparmor.d/usr.lib.libreoffice.program.xpdfimport
@@ -17,9 +17,8 @@
  profile libreoffice-xpdfimport /usr/lib/libreoffice/program/xpdfimport {
    #include <abstractions/base>
  
-  owner /tmp/*              r,     #Seems to need to read file created with pattern /tmp/RRRRRR
-  owner /tmp/lu**           rw,    #makes files like luRRRRR.tmp/lubRRRR.tmp where R is random
-                                   #Note, usually it's lub or luc, don't know why.
+  #include <abstractions/user-tmp>
+
    /usr/share/poppler/**     r,
    /usr/share/libreoffice/share/config/* r,
    owner @{HOME}/.config/libreoffice{,dev}/?/user/uno_packages/cache/log.txt rw,
diff --git a/group b/group

index f4b9f06471a8ffeb29b5f6000fdd1458d1740bf9..a5bfd220bfa530adf373e2b9143247e14f27781a 100644 (file)
--- a/group
+++ b/group
@@ -3,7 +3,7 @@ daemon:x:1:
  bin:x:2:
  sys:x:3:
  adm:x:4:syslog,frank
-tty:x:5:frank
+tty:x:5:frank,syslog
  disk:x:6:
  lp:x:7:frank
  mail:x:8:
diff --git a/group- b/group-

index c96b267cd670c4c95042fa1fae04931241c7c23a..f4b9f06471a8ffeb29b5f6000fdd1458d1740bf9 100644 (file)
--- a/group-
+++ b/group-
@@ -92,3 +92,4 @@ render:x:148:
  tss:x:149:
  _flatpak:x:150:
  systemd-timesync:x:999:
+sambamachines:x:1127:
diff --git a/gshadow b/gshadow

index ced9c75c6d238511d1168c5a0b82ed6d35a99b3c..0f15a143fc7fdeffd364c52f90063ea839e933f3 100644 (file)
--- a/gshadow
+++ b/gshadow
@@ -3,7 +3,7 @@ daemon:*::
  bin:*::
  sys:*::
  adm:*::syslog,frank
-tty:*::frank
+tty:*::frank,syslog
  disk:*::
  lp:*::frank
  mail:*::
diff --git a/gshadow- b/gshadow-

index f3f5a17877de77c9d9797be32b4faa33d54364c1..ced9c75c6d238511d1168c5a0b82ed6d35a99b3c 100644 (file)
--- a/gshadow-
+++ b/gshadow-
@@ -92,3 +92,4 @@ render:!::
  tss:!::
  _flatpak:!::
  systemd-timesync:!!::
+sambamachines:!::
diff --git a/systemd/system/bind9.service b/systemd/system/bind9.service

new file mode 120000 (symlink)

index 0000000..66d6674
--- /dev/null
+++ b/systemd/system/bind9.service
@@ -0,0 +1 @@
+/lib/systemd/system/named.service
+\ No newline at end of file
author	Frank Brehm <frank@brehm-online.com>
	Sun, 23 Aug 2020 15:08:11 +0000 (17:08 +0200)
committer	Frank Brehm <root@bruni.home.brehm-online.com>
	Sun, 23 Aug 2020 15:08:11 +0000 (17:08 +0200)
apparmor.d/usr.lib.libreoffice.program.senddoc		patch \| blob \| history
apparmor.d/usr.lib.libreoffice.program.soffice.bin		patch \| blob \| history
apparmor.d/usr.lib.libreoffice.program.xpdfimport		patch \| blob \| history
group		patch \| blob \| history
group-		patch \| blob \| history
gshadow		patch \| blob \| history
gshadow-		patch \| blob \| history
systemd/system/bind9.service	[new symlink]	patch \| blob