[apparmor] [patch] extra profiles: useradd executes nscd

Steve Beattie steve at nxnw.org
Tue Dec 2 17:46:11 UTC 2014


On Mon, Dec 01, 2014 at 11:07:33PM +0100, Christian Boltz wrote:
> in my server profiles, I found that useradd for some reason executes 
> nscd (maybe to tell it to refresh its cache?)

Checking the nscd man page, it looks like ncsd -i TABLE does that,
though I think it's supposed to monitor some of the services that it
caches for changes and update automatically.

Acked-by: Steve Beattie <steve at nxnw.org>

> === modified file 'profiles/apparmor/profiles/extras/usr.sbin.useradd'
> --- profiles/apparmor/profiles/extras/usr.sbin.useradd  2014-09-18 22:03:49 +0000
> +++ profiles/apparmor/profiles/extras/usr.sbin.useradd  2014-12-01 21:32:46 +0000
> @@ -50,6 +50,7 @@
>    @{PROC}/filesystems r,
>    /usr/lib*/pwdutils/*so* mr,
>    /usr/sbin/adduser rmix,
> +  /usr/sbin/nscd rPix,
>    /usr/sbin/useradd rmix,
>    /usr/sbin/useradd.local rmix,
>    /var/log/faillog rw,

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20141202/d35474d2/attachment.pgp>


More information about the AppArmor mailing list