[apparmor] [PATCH] allow access to egl libraries in X abstraction

[Jamie Strandboge]

I noticed the following denial when using Oxide under X:
May 15 16:52:06 localhost kernel: [318977.280956] type=1400
audit(1400190726.317:409): apparmor="DENIED" operation="file_mmap"
profile="com.ubuntu.developer.jdstrand.rottentomatoes_rottentomatoes_0.10"
name="/usr/lib/x86_64-linux-gnu/egl/egl_gallium.so" pid=3920
comm="webapp-containe" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

Attached is a patch to the X abstraction to fix this issue. This is fine for 2.8
as well if people want it there.

-- 
Jamie Strandboge                 http://www.ubuntu.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-lp1320014.patch
Type: text/x-patch
Size: 618 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140515/8bf14df8/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 884 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140515/8bf14df8/attachment.pgp>