[apparmor] [PATCH] profiles: dnsmasq needs dbus abstraction

Christian Boltz apparmor at cboltz.de
Thu Aug 22 20:23:28 UTC 2013


Hello,

Am Dienstag, 20. August 2013 schrieb Tyler Hicks:
> When dnsmasq is started with the --enable-dbus option, it uses the
> system bus.
> 
> Signed-off-by: Tyler Hicks <tyhicks at canonical.com>
> 
> Index: apparmor-2.8.0/profiles/apparmor.d/usr.sbin.dnsmasq
> ===================================================================
> ---
> apparmor-2.8.0.orig/profiles/apparmor.d/usr.sbin.dnsmasq	2013-08-20
> 13:58:51.417693552 -0700 +++
> apparmor-2.8.0/profiles/apparmor.d/usr.sbin.dnsmasq	2013-08-20
> 14:17:47.329720549 -0700 @@ -14,6 +14,7 @@
>  #include <tunables/global>
>  /usr/sbin/dnsmasq {
>    #include <abstractions/base>
> +  #include <abstractions/dbus>
>    #include <abstractions/nameservice>
> 
>    capability net_bind_service,

I'd say this patch is a good candidate for the 2.8 tree ;-)
(you can take this mail as an ACKed-by $from if you want ;-)


Regards,

Christian Boltz
-- 
> > Wieso ich, ich habe 1,5 Mbit anbindung, ständig.
> Du? Oder dein Rechner? :-)
Was meinst du wie ich nach 1,500,000 Bit aussehe, glaubst du,
dann könnte ich noch schreiben, geschweige denn programmieren?
[> Ratti und Gerald Goebel in fontlinge-devel]




More information about the AppArmor mailing list