The new thumbnailer uses apparmor queries to determine whether the caller is allowed to access the original file. If not, it denies access to the thumbnail too.
The new thumbnailer uses apparmor queries to determine whether the caller is allowed to access the original file. If not, it denies access to the thumbnail too.