[apparmor] [PATCH] p11-kit needs access to /usr/share/p11-kit/modules
Steve Beattie
steve at nxnw.org
Wed Sep 11 22:49:23 UTC 2013
On Wed, Sep 11, 2013 at 07:55:30AM -0500, Jamie Strandboge wrote:
> Subject says it all. Patch attached.
Acked-by: Steve Beattie <steve at nxnw.org> (for trunk and 2.8)
> Author: Jamie Strandboge <jamie at canonical.com>
> Description: p11-kit needs access to /usr/share/p11-kit/modules
> Forwarded: yes
> Index: apparmor-2.8.0/profiles/apparmor.d/abstractions/p11-kit
> ===================================================================
> --- apparmor-2.8.0.orig/profiles/apparmor.d/abstractions/p11-kit 2012-01-18 16:22:08.000000000 -0600
> +++ apparmor-2.8.0/profiles/apparmor.d/abstractions/p11-kit 2013-09-10 12:04:59.000000000 -0500
> @@ -16,6 +16,9 @@
> /usr/lib{,32,64}/pkcs11/*.so mr,
> /usr/lib/@{multiarch}/pkcs11/*.so mr,
>
> + /usr/share/p11-kit/modules/ r,
> + /usr/share/p11-kit/modules/* r,
> +
> # p11-kit also supports reading user configuration from ~/.pkcs11 depending
> # on how /etc/pkcs11/pkcs11.conf is configured. This should generally not be
> # included in this abstraction.
--
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130911/c5f081b8/attachment.pgp>
More information about the AppArmor
mailing list