Debian: AppArmor fix for Oracle JVM (ticket #2319)

Allow any JRE or JDK to work
This commit is contained in:
zzz
2019-02-01 13:11:12 +00:00
parent ec5e2dba94
commit 428fb269f0

14
debian/apparmor/i2p vendored
View File

@ -33,17 +33,13 @@
/usr/share/javazi/** r, /usr/share/javazi/** r,
/etc/java-*-openjdk/** r, /etc/java-*-openjdk/** r,
/usr/lib/jvm/default-java/jre/bin/java rix, # Allow any JRE or JDK
/usr/lib/jvm/java-*-openjdk-*/jre/bin/java rix, /usr/lib/jvm/*/jre/bin/java rix,
/usr/lib/jvm/java-*-openjdk-*/jre/bin/keytool rix, /usr/lib/jvm/*/jre/bin/keytool rix,
# Oracle Java is needed on the Raspberry Pi and is included in Raspbian's repositories
/usr/lib/jvm/jdk-*-oracle-*/jre/bin/java rix,
/usr/lib/jvm/jdk-*-oracle-*/jre/bin/keytool rix,
# */client/classes.jsa is only found (and needed) in 32-bit JVMs. # */client/classes.jsa is only found (and needed) in 32-bit JVMs.
/usr/lib/jvm/java-*-openjdk-*/jre/lib/i386/client/classes.jsa m, /usr/lib/jvm/*/jre/lib/i386/client/classes.jsa m,
/usr/lib/jvm/java-*-oracle-*/jre/lib/i386/client/classes.jsa m, /usr/lib/jvm/*/jre/lib/i386/client/classes.jsa m,
# needed for I2P's graphs # needed for I2P's graphs
/usr/share/java/java-atk-wrapper.jar r, /usr/share/java/java-atk-wrapper.jar r,