Package: apparmor
Version: 2.11.0-10
Severity: minor
Tags: patch
When running Quake III Arena (OpenArena is probably also affected) with
a recent OpenAL:
Sep 08 14:52:08 perpetual kernel: audit: type=1400 audit(1504878728.639:200):
apparmor="ALLOWED" operation="open" profile="/usr/lib/ioquake3/ioquake3"
name="/usr/share/openal/hrtf/" pid=3751 comm="ioquake3" requested_mask="r"
denied_mask="r" fsuid=1000 ouid=0
Sep 08 14:52:08 perpetual kernel: audit: type=1400 audit(1504878728.639:201):
apparmor="ALLOWED" operation="open" profile="/usr/lib/ioquake3/ioquake3"
name="/usr/share/openal/hrtf/default-44100.mhr" pid=3751 comm="ioquake3"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Sep 08 14:52:08 perpetual kernel: audit: type=1400 audit(1504878728.645:202):
apparmor="ALLOWED" operation="open" profile="/usr/lib/ioquake3/ioquake3"
name="/usr/share/openal/hrtf/default-48000.mhr" pid=3751 comm="ioquake3"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
These files are "head-related transfer function" data sets, used by
OpenAL for better spatialization of sounds when headphones are detected.
I think <abstractions/audio> should allow reading them.
--- /etc/apparmor.d/abstractions/audio.dpkg-dist 2017-09-08
15:17:21.075148412 +0100
+++ /etc/apparmor.d/abstractions/audio 2017-09-08 15:17:42.619138139 +0100
@@ -68,6 +68,8 @@
# openal
/etc/openal/alsoft.conf r,
owner @{HOME}/.alsoftrc r,
+/usr/{,local/}share/openal/hrtf/{,**} r,
+owner @{HOME}/.local/share/openal/hrtf/{,**} r,
# wildmidi
/etc/wildmidi/wildmidi.cfg r,
Regards,
S
