Re: Apparmor profile for LyX on Linux ?

[Kornel Benko]

Am Sonntag, 13. November 2016 um 22:40:59, schrieb Tommaso Cucinotta 
<tomm...@lyx.org>
> On 13/11/2016 22:33, Kornel Benko wrote:
> > You are right. Through the script we try to run "lyxwrap2.3", and this 
> > command does not exist in my case.
> >
> > I could not find lyxwrap.cpp, therefore I can not create this command.
>
> slipped out of the commits, sorry about that! Now it's in my repo, or just 
> see attachment :-).
>
>       T.

OK. Patch for added cmake-changes attached.

Now the compilation succeeds (which it should not, I suppose).
The file /tmp/ssh.tar.gz _is_ created.
Restarting /etc/init.d/apparmor did not help. (It restarts and does not 
complain)
# sudo /etc/init.d/apparmor restart
 * Reloading AppArmor profiles
Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd

The file /etc/apparmor.d/usr.local.bin.lyx2.3 is attached, I don't see anything 
wrong.
I have to confess, this is new to me, so I may have gotten something wrong.

        Kornel

signature.asc
Description: This is a digitally signed message part.

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 0c56ce6..4b41260 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -25,8 +25,10 @@ file(GLOB lyx_sources ${TOP_SRC_DIR}/src/${LYX_CPP_FILES})
 file(GLOB moc_files ${TOP_SRC_DIR}/src/${LYX_MOC_FILES})
 list(REMOVE_ITEM  lyx_sources ${moc_files} .)
 file(GLOB lyx_headers ${TOP_SRC_DIR}/src/${LYX_HPP_FILES})
+set(lyxwrap_sources ${TOP_SRC_DIR}/src/lyxwrap.cpp)
 
 list(REMOVE_ITEM lyx_sources
+	${TOP_SRC_DIR}/src/lyxwrap.cpp
 	${TOP_SRC_DIR}/src/Variables.cpp
 	${TOP_SRC_DIR}/src/Section.cpp
 	${TOP_SRC_DIR}/src/lyxcore.cpp
@@ -189,4 +191,9 @@ if(LYX_BUNDLE)
 	endif()
 endif()
 
+if(USE_POSIX_PACKAGING)
+  add_executable(lyxwrap${PROGRAM_SUFFIX} ${lyxwrap_sources})
+  install(TARGETS lyxwrap${PROGRAM_SUFFIX} DESTINATION ${LYX_UTILITIES_INSTALL_PATH})
+endif()
+
 add_subdirectory(tests)

# vim:syntax=apparmor
# Author: Tommaso Cucinotta <tomm...@lyx.org>

#include <tunables/global>

/usr/local/bin/lyxwrap2.3 {
  #include <abstractions/dbus>
  #include <abstractions/dbus-session>
  #include <abstractions/dbus-accessibility>
  #include <abstractions/X>
  #include <abstractions/gnome>

  owner /tmp/** ixrwl,
  @{HOME}/** ixr,
  @{HOME}/.lyx2.3** ixrwl,
  @{HOME}/.config/LyX** ixrwl,
  / ixr,
  /** ixr,
  deny /etc/security/ xrwl,
  deny /etc/security/** xrwl,
  deny /etc/passwd* xrwl,
  deny /etc/shadow* xrwl,
}