[apparmor] ssl_certs abstraction should support ca-certificates

John Johansen john.johansen at canonical.com
Wed Aug 11 14:35:42 BST 2010


On 08/11/2010 09:31 AM, Jamie Strandboge wrote:
> The following fixes LP: #605835. It should be considered for 2.5.1:
> === modified file 'profiles/apparmor.d/abstractions/ssl_certs'
> --- profiles/apparmor.d/abstractions/ssl_certs	2007-08-23 22:49:11 +0000
> +++ profiles/apparmor.d/abstractions/ssl_certs	2010-08-11 13:26:21 +0000
> @@ -2,6 +2,7 @@
>  # ------------------------------------------------------------------
>  #
>  #    Copyright (C) 2002-2005 Novell/SUSE
> +#    Copyright (C) 2010 Canonical Ltd.
>  #
>  #    This program is free software; you can redistribute it and/or
>  #    modify it under the terms of version 2 of the GNU General Public
> @@ -12,3 +13,5 @@
>    /etc/ssl/ r,
>    /etc/ssl/certs/ r,
>    /etc/ssl/certs/* r,
> +  /usr/share/ca-certificates/ r,
> +  /usr/share/ca-certificates/** r,

ACK,

not 2.5.1 nomination



More information about the AppArmor mailing list