On 2018-01-11 03:19 PM, Carsten Schoenert wrote: > You can try to add a line for the Acrobat Reader into the profile. But > this is blind shot from me, acroread will requesting probably further > files.
I think you shot the target ;)
> diff --git a/debian/apparmor/usr.bin.thunderbird
> b/debian/apparmor/usr.bin.thunderbird
> index d1f4098c75..6744f4e058 100644
> --- a/debian/apparmor/usr.bin.thunderbird
> +++ b/debian/apparmor/usr.bin.thunderbird
> @@ -198,6 +198,8 @@ profile thunderbird @{thunderbird_executable} {
> /{usr/,}bin/ps Uxr,
> /{usr/,}bin/uname Uxr,
> /usr/bin/locale Uxr,
> + # may work for Adobe Acrobat
> + /usr/bin/acroread Uxr,
Generally, it is better to use "PUxr" instead of "Uxr". The former will
allow a transition to acroread's dedicated profile if it exists or run
uncontained otherwise.
Regards,
Simon
signature.asc
Description: OpenPGP digital signature
