[apparmor] [patch] abstractions/ssl_certs update

Seth Arnold seth.arnold at canonical.com
Mon Nov 25 19:55:36 UTC 2013


On Sun, Nov 24, 2013 at 05:17:27PM +0100, Christian Boltz wrote:
> Hello,
> 
> add /var/lib/ca-certificates/ to abstractions/ssl_certs.
> 
> update-ca-certificates (from ca-certificates-1_201310161709-1.1.noarch) 
> stores certs in this directory now.
> 
> References: https://bugzilla.novell.com/show_bug.cgi?id=852018
> 
> I propose this patch for trunk and the 2.8 branch.

Acked-by: Seth Arnold <seth.arnold at canonical.com>

(It doesn't match what our ca-certificates version 20130906 does, I
presume it will match some day, though.. :)

Thanks!

> 
> === modified file 'profiles/apparmor.d/abstractions/ssl_certs'
> --- profiles/apparmor.d/abstractions/ssl_certs  2011-08-08 20:22:03 
> +++ profiles/apparmor.d/abstractions/ssl_certs  2013-11-24 16:14:18 
> @@ -17,3 +17,5 @@
>    /usr/share/ssl/certs/ca-bundle.crt          r,
>    /usr/local/share/ca-certificates/ r,
>    /usr/local/share/ca-certificates/** r,
> +  /var/lib/ca-certificates/ r,
> +  /var/lib/ca-certificates/** r,
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20131125/854c194e/attachment.pgp>


More information about the AppArmor mailing list