Description: When enforced the apparmor profiles prevent libreoffice from seeing and executing installed JREs. Steps to Reproduce: With the recent apparmor profile fixes (https://cgit.freedesktop.org/libreoffice/core/log/sysui/desktop/apparmor/program.soffice.bin), and the profiles in enforcement mode, run libreoffice, open Tools > Options, then LibreOffice > Advanced, and check whether JREs are listed Actual Results: No JRE are listed, and attempting to manually add an installed JRE by its full path fails. Expected Results: The default JRE (on my system /usr/lib/jvm/java-1.8.0-openjdk-amd64/jre/bin/java) is found and selected by default. Reproducible: Always User Profile Reset: No Additional Info: User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.40 Safari/537.36
I added the following rule to /etc/apparmor.d/usr.lib.libreoffice.program.soffice.bin and reloaded the profile, and that appears to fix the issue: /usr/lib{,32,64}/jvm/**/jre/bin/java mix,
confirming. see this in my sid VM, too
Olivier Tilloy committed a patch related to this issue. It has been pushed to "master": http://cgit.freedesktop.org/libreoffice/core/commit/?id=c67b490637b586616b46db349b1215296daa34e3 tdf#115208 Apparmor profile update (allow JVM execution) It will be available in 6.1.0. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
fixed in master (based on https://git.launchpad.net/~libreoffice/ubuntu/+source/libreoffice/commit/?h=ubuntu-bionic-5.4&id=2fa3ce8e733c99ba4b6f6ef30b204f18e8253752), will also send it for review for -6-0
Olivier Tilloy committed a patch related to this issue. It has been pushed to "libreoffice-6-0": http://cgit.freedesktop.org/libreoffice/core/commit/?id=22b1212fb5481706884c412f57e8cd3ee4aff0f2&h=libreoffice-6-0 tdf#115208 Apparmor profile update (allow JVM execution) It will be available in 6.0.1. The patch should be included in the daily builds available at http://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: http://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.