[apparmor] [patch] profiles: postfix/master also needs lock permissions for master.pid

[Seth Arnold]

On Wed, Jun 24, 2015 at 10:56:01PM +0200, Christian Boltz wrote:
> Hello,
> 
> postfix/master also needs lock permissions for master.pid
> 
> reported by darix some weeks ago, and also confirmed on my own servers. 
> 
> 
> I propose this patch for trunk and 2.9.

Acked for both

Acked-by: Seth Arnold <seth.arnold at canonical.com>

Thanks

> 
> 
> [ profiles-postfix-master-pid-k.diff ]
> 
> === modified file 'profiles/apparmor/profiles/extras/usr.lib.postfix.master'
> --- profiles/apparmor/profiles/extras/usr.lib.postfix.master    2014-06-27 04:32:56 +0000
> +++ profiles/apparmor/profiles/extras/usr.lib.postfix.master    2015-06-08 12:44:53 +0000
> @@ -21,7 +21,7 @@
>    capability dac_override,
>  
>    /etc/postfix/master.cf                       r,
> -  /{var/spool/postfix/,}pid/master.pid            rw,
> +  /{var/spool/postfix/,}pid/master.pid            rwk,
>    /{var/spool/postfix/,}private/*                 wl,
>    /{var/spool/postfix/,}private/tlsmgr            rwl,
>    /{var/spool/postfix/,}public/{cleanup,flush,pickup,qmgr,showq,tlsmgr} rwl,
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150624/d3c327b4/attachment.pgp>