[apparmor] [patch] syslog-ng - capability dac_read_search

Christian Boltz apparmor at cboltz.de
Thu Jan 5 11:26:45 UTC 2012


Hello,

according to Peter Czanik, the openSUSE syslog-ng maintainer, syslog-ng 
needs capability dac_read_search.

I also nominate this patch for the 2.7 branch.

=== modified file 'profiles/apparmor.d/sbin.syslog-ng'
--- profiles/apparmor.d/sbin.syslog-ng  2011-09-15 19:21:57 +0000
+++ profiles/apparmor.d/sbin.syslog-ng  2012-01-05 11:05:54 +0000
@@ -23,6 +23,7 @@
 
   capability chown,
   capability dac_override,
+  capability dac_read_search,
   capability fsetid,
   capability fowner,
   capability sys_tty_config,



Regards,

Christian Boltz
-- 
Sorry, mit java kenne ich mich gar nicht aus, das ist mir einfach zu
unportabel.                           [Thorsten Kukuk in suse-linux]




More information about the AppArmor mailing list