Merge lp://staging/~verzegnassi-stefano/ubuntu-docviewer-app/fix-deletion-from-external-storage into lp://staging/ubuntu-docviewer-app

Proposed by Stefano Verzegnassi
Status: Merged
Approved by: Roman Shchekin
Approved revision: 242
Merged at revision: 242
Proposed branch: lp://staging/~verzegnassi-stefano/ubuntu-docviewer-app/fix-deletion-from-external-storage
Merge into: lp://staging/ubuntu-docviewer-app
Diff against target: 13 lines (+2/-1)
1 file modified
click/docviewer.apparmor (+2/-1)
To merge this branch: bzr merge lp://staging/~verzegnassi-stefano/ubuntu-docviewer-app/fix-deletion-from-external-storage
Reviewer Review Type Date Requested Status
Roman Shchekin Approve
Jenkins Bot continuous-integration Approve
Alan Pope 🍺🐧🐱 πŸ¦„ Pending
Review via email: mp+281360@code.staging.launchpad.net

Commit message

Updated AppArmor template. It fixes the deletion of a document stored on a SD card.

Description of the change

Updated AppArmor template.
It fixes the deletion of a document stored on a SD card (which currently drops a DENIAL).

This would give us write permissions to the Documents folder in any external storage. Similar rights are already used by gallery-app and camera-app for similar reasons, through the 'picture_files' policy[1].
From the DocViewer perspective, this represents a move from an hypothetical 'document_files_read' to a 'document_files' policy.

@Alan: I'm expressly asking you as reviewer for the reason above, since we may need a authorization from the security team (this would probably be the first case of confined core app using a less restrictive policy).

[1] http://bazaar.launchpad.net/~ubuntu-security/apparmor-easyprof-ubuntu/trunk/view/head:/data/policygroups/ubuntu/1.1/picture_files

To post a comment you must log in.
Revision history for this message
Jenkins Bot (ubuntu-core-apps-jenkins-bot) wrote :
review: Approve (continuous-integration)
Revision history for this message
Roman Shchekin (mrqtros) wrote :

Ok.

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
The diff is not available at this time. You can reload the page or download it.

Subscribers

People subscribed via source and target branches