From 95ffbf650fe3585268604c11f7711db35df80cd9 Mon Sep 17 00:00:00 2001 From: pi Date: Wed, 23 Nov 2022 12:06:05 +0100 Subject: [PATCH] committing changes in /etc made by "/usr/bin/apt-get -y -o Dpkg::Options::=--force-confdef -o Dpkg::Options::=--force-confold upgrade --with-new-pkgs" Packages with configuration changes: -thunderbird 1:102.4.0-1~deb11u1 amd64 +thunderbird 1:102.5.0-1~deb11u1 amd64 Package changes: -containerd.io 1.6.9-1 amd64 +containerd.io 1.6.10-1 amd64 -firefox-esr 102.4.0esr-1~deb11u1 amd64 -firefox-esr-l10n-de 102.4.0esr-1~deb11u1 all +firefox-esr 102.5.0esr-1~deb11u1 amd64 +firefox-esr-l10n-de 102.5.0esr-1~deb11u1 all -grub-common 2.06-3~deb11u2 amd64 -grub-efi-amd64 2.06-3~deb11u2 amd64 -grub-efi-amd64-bin 2.06-3~deb11u2 amd64 -grub-efi-amd64-signed 1+2.06+3~deb11u2 amd64 -grub2-common 2.06-3~deb11u2 amd64 +grub-common 2.06-3~deb11u4 amd64 +grub-efi-amd64 2.06-3~deb11u4 amd64 +grub-efi-amd64-bin 2.06-3~deb11u4 amd64 +grub-efi-amd64-signed 1+2.06+3~deb11u4 amd64 +grub2-common 2.06-3~deb11u4 amd64 -krb5-locales 1.18.3-6+deb11u2 all +krb5-locales 1.18.3-6+deb11u3 all -libgssapi-krb5-2 1.18.3-6+deb11u2 amd64 -libgssapi-krb5-2 1.18.3-6+deb11u2 i386 +libgssapi-krb5-2 1.18.3-6+deb11u3 amd64 +libgssapi-krb5-2 1.18.3-6+deb11u3 i386 -libk5crypto3 1.18.3-6+deb11u2 amd64 -libk5crypto3 1.18.3-6+deb11u2 i386 +libk5crypto3 1.18.3-6+deb11u3 amd64 +libk5crypto3 1.18.3-6+deb11u3 i386 -libkrb5-3 1.18.3-6+deb11u2 amd64 -libkrb5-3 1.18.3-6+deb11u2 i386 -libkrb5support0 1.18.3-6+deb11u2 amd64 -libkrb5support0 1.18.3-6+deb11u2 i386 +libkrb5-3 1.18.3-6+deb11u3 amd64 +libkrb5-3 1.18.3-6+deb11u3 i386 +libkrb5support0 1.18.3-6+deb11u3 amd64 +libkrb5support0 1.18.3-6+deb11u3 i386 -spotify-client 1:1.1.84.716.gc5f8b819 amd64 +spotify-client 1:1.1.84.716.gc5f8b819-2 amd64 -thunderbird 1:102.4.0-1~deb11u1 amd64 +thunderbird 1:102.5.0-1~deb11u1 amd64 -wine-staging 7.20~bullseye-1 amd64 -wine-staging-amd64 7.20~bullseye-1 amd64 -wine-staging-i386 7.20~bullseye-1 i386 +wine-staging 7.21~bullseye-1 amd64 +wine-staging-amd64 7.21~bullseye-1 amd64 +wine-staging-i386 7.21~bullseye-1 i386 -winehq-staging 7.20~bullseye-1 amd64 +winehq-staging 7.21~bullseye-1 amd64 --- .etckeeper | 1 + apparmor.d/usr.bin.thunderbird | 11 +++++++++++ .../spotify-2022-11-14-7A3A762FAFD4A51F.gpg | Bin 0 -> 1184 bytes mailcap | 1 + 4 files changed, 13 insertions(+) create mode 100644 apt/trusted.gpg.d/spotify-2022-11-14-7A3A762FAFD4A51F.gpg diff --git a/.etckeeper b/.etckeeper index 4a1f9b80..dd8d139a 100755 --- a/.etckeeper +++ b/.etckeeper @@ -590,6 +590,7 @@ maybe chmod 0644 'apt/trusted.gpg.d/debian-archive-stretch-stable.gpg' maybe chmod 0644 'apt/trusted.gpg.d/google-chrome.gpg' maybe chmod 0644 'apt/trusted.gpg.d/lutris.asc' maybe chmod 0644 'apt/trusted.gpg.d/spotify-2021-10-27-5E3C45D7B312C643.gpg' +maybe chmod 0644 'apt/trusted.gpg.d/spotify-2022-11-14-7A3A762FAFD4A51F.gpg' maybe chmod 0644 'apt/trusted.gpg.d/steam.gpg' maybe chmod 0755 'avahi' maybe chmod 0755 'avahi/avahi-autoipd.action' diff --git a/apparmor.d/usr.bin.thunderbird b/apparmor.d/usr.bin.thunderbird index 5c69ecdf..59e72aed 100644 --- a/apparmor.d/usr.bin.thunderbird +++ b/apparmor.d/usr.bin.thunderbird @@ -17,8 +17,10 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} { #include #include #include + #include #include #include + #include #include #include #include @@ -43,6 +45,10 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} { # Backported from the dri-enumerate abstraction, available in AppArmor 2.13 /sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r, + # Imported from the opencl abstraction, which we cannot include + # due to conflicting "x" + @{sys}/devices/pci[0-9]*/**/{class,config,resource,revision} r, + # Allow opening attachments # TODO: create and use abstractions for opening various file formats /{usr/local/,usr/,}bin/* Cx -> sanitized_helper, @@ -334,6 +340,9 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} { # TB tries to create this file but has no business doing so deny @{HOME}/.gnupg/gpg-agent.conf w, + # Required for Wayland display protocol support + owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw, + profile gpg { #include @@ -425,6 +434,8 @@ profile thunderbird /usr/lib/thunderbird/thunderbird{,-bin} { owner /tmp/gpg-[a-zA-Z0-9]*/S.gpg-agent rw, /usr/share/sounds/** r, + + deny /dev/shm/org.chromium.* rw, # file_inherit only } # Site-specific additions and overrides. See local/README for details. diff --git a/apt/trusted.gpg.d/spotify-2022-11-14-7A3A762FAFD4A51F.gpg b/apt/trusted.gpg.d/spotify-2022-11-14-7A3A762FAFD4A51F.gpg new file mode 100644 index 0000000000000000000000000000000000000000..6cf41ed910bbb1d0a13525a52b65b034b2955108 GIT binary patch literal 1184 zcmV;R1Yi4^0u2OXau9<75CGW8-DK>GYQmJ26FIP1-tLn_AW~3r7@z#Q*fDrT{X(`P zMe78)1a6=H)(c6KH@y@UKtU{eLrmWdblr{&+Rl>hmc`ZwGZ0+~%VI${+_YvsfE5ES zF7=xmzJ@q#XLDT6sQbw)EL@?>G!AO0YEB)x_jfa?ZToa{X?J_|0u3O?h{8(@=0@dG zK4|C7I$Tf2109huWoF#|5{fQ2AUV3L`;Tm+&Dp6X5vnY&rSeI~{z;P9MAQ}AI$cHw zi0Gs%oj~kW&I7Cav0WS#6gj5f;|>uJn-_T~K&9ok+}w=n2z#QK1dVD5yvB>iLUhF8 z2gD)O#~CoHUr19G2Rm42NA13Qp0GVJT}z8Nr{7gx7f6%>Oy+RTTjcxZ7Xye8NPRx? zA??fe#d15l+%6l>r8Si`#f7ZHjPzu%?*42FYS4V8>g{&2QR+LR2dmKj6s(Ahw|Pp1Ey zm>qy|fa^r)==2kh=HdTPhP{?3s%J70oB{%3$^TqmJr?(VKLMEwD3*jI-3X~;f;lfv zX`YIG6Ws7Irs7uEKXCJiNvZS&36Jz$u_JW=P>k=voQ=s)g>OWHkr@T*F^MsLuxgBw zccx{y(|YPX#PH80pc1|(rA*6SB!v4-hFU->vBd6#}S$V-?lf| zMCWoV2jb8y(-sm5Ki2py%V7t2*{t9#)J=o8fXKpMa=m@9 z2V3%&1%=@WE#-?Y`}HE?`wn{g37G_RM=C>z>wWM~mimIH4_J>%WGIxFWH4D=L8|FH zyd%F;P*I?r(%vIJ<5pE0>{x@&-WY=L3cdg`2Bd-flUj;<*#5xp@|V?2hppd{7a0Sa zScIaBX;zRTHmax?_)PhVRN4YssGyp(zWRl)aq4E8;7OYbKcxE6K|LMlWKMOBEGmTf z**rcmV}+;sF45b9dPb-i#hWOob|G-qV+BZ8b7an}0iqAty0#sPxP=;z3P;YCvIyI= zjS`crqGh1kK>^(2H@IL2 z$s*`P&;X3S13cbifFe;s{83BygrWS_P9YA4