[apparmor] [patch] add some missing /run/dovecot/* to usr.lib.dovecot.imap{, -login}

John Johansen john.johansen at canonical.com
Mon Dec 22 13:32:53 UTC 2014


On 12/03/2014 01:50 PM, Christian Boltz wrote:
> Hello,
> 
> this patch adds the needed permissions as reported in 
> https://bugs.launchpad.net/apparmor/+bug/1296667/ comment #1
> to the usr.lib.dovecot.imap and imap-login profiles.
> 
Acked-by: John Johansen <john.johansen at canonical.com>

> 
> === modified file 'profiles/apparmor.d/usr.lib.dovecot.imap'
> --- profiles/apparmor.d/usr.lib.dovecot.imap    2014-09-25 22:37:14 +0000
> +++ profiles/apparmor.d/usr.lib.dovecot.imap    2014-12-03 21:47:43 +0000
> @@ -26,6 +26,7 @@
>  
>    @{HOME} r, # ???
>    /usr/lib/dovecot/imap mr,
> +  /{,var/}run/dovecot/auth-master rw,
>  
>    # Site-specific additions and overrides. See local/README for details.
>    #include <local/usr.lib.dovecot.imap>
> 
> === modified file 'profiles/apparmor.d/usr.lib.dovecot.imap-login'
> --- profiles/apparmor.d/usr.lib.dovecot.imap-login      2014-06-27 19:14:53 +0000
> +++ profiles/apparmor.d/usr.lib.dovecot.imap-login      2014-12-03 21:46:47 +0000
> @@ -24,6 +24,7 @@
>    network inet6 stream,
>  
>    /usr/lib/dovecot/imap-login mr,
> +  /{,var/}run/dovecot/anvil rw,
>    /{,var/}run/dovecot/login/ r,
>    /{,var/}run/dovecot/login/* rw,
>  
> 
> 
> Regards,
> 
> Christian Boltz
> 




More information about the AppArmor mailing list