[apparmor] [patch] Add the attach_disconnected flag to the ntpd profile

Christian Boltz apparmor at cboltz.de
Sat May 16 23:31:03 UTC 2015


this patch adds the attach_disconnected flag to the ntpd profile.

I noticed "disconnected path" (run/nscd/*) events for ntpd while
updating to the latest openSUSE Tumbleweed.

I propose this patch for trunk and 2.9.

[ ntpd-attach-disconnected.diff ]

=== modified file 'profiles/apparmor.d/usr.sbin.ntpd'
--- profiles/apparmor.d/usr.sbin.ntpd   2014-10-06 17:57:46 +0000
+++ profiles/apparmor.d/usr.sbin.ntpd   2015-05-16 23:25:35 +0000
@@ -11,7 +11,7 @@
 #include <tunables/global>
 #include <tunables/ntpd>
-/usr/sbin/ntpd {
+/usr/sbin/ntpd flags=(attach_disconnected) {
   #include <abstractions/base>
   #include <abstractions/nameservice>
   #include <abstractions/openssl>


Christian Boltz
[diverse Fähigkeiten von Google]
Beagle2 wird google allerdings wohl auch nicht finden...
[Achim Hillenbrand in suse-linux]

More information about the AppArmor mailing list