[apparmor] [patch] syslog-ng - capability dac_read_search
Christian Boltz
apparmor at cboltz.de
Thu Jan 5 11:26:45 UTC 2012
Hello,
according to Peter Czanik, the openSUSE syslog-ng maintainer, syslog-ng
needs capability dac_read_search.
I also nominate this patch for the 2.7 branch.
=== modified file 'profiles/apparmor.d/sbin.syslog-ng'
--- profiles/apparmor.d/sbin.syslog-ng 2011-09-15 19:21:57 +0000
+++ profiles/apparmor.d/sbin.syslog-ng 2012-01-05 11:05:54 +0000
@@ -23,6 +23,7 @@
capability chown,
capability dac_override,
+ capability dac_read_search,
capability fsetid,
capability fowner,
capability sys_tty_config,
Regards,
Christian Boltz
--
Sorry, mit java kenne ich mich gar nicht aus, das ist mir einfach zu
unportabel. [Thorsten Kukuk in suse-linux]
More information about the AppArmor
mailing list