[apparmor] [patch] Change /bin/ paths in profiles to also match on /usr/bin/

Seth Arnold seth.arnold at canonical.com
Fri Sep 18 22:09:50 UTC 2015


On Fri, Sep 18, 2015 at 09:54:58PM +0200, Christian Boltz wrote:
> oftc_ftw reported on IRC that Arch Linux has a symlink /bin -> /usr/bin.
> This means we have to update paths for /bin/ in several profiles to also
> allow /usr/bin/

I think this would be better solved by alias rules, one

  alias /bin -> /usr/bin,

in /etc/apparmor.d/tunables/alias will address this for all profiles that
include this file, without having to juggle around more complicated
regular expressions.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150918/b04daea0/attachment.pgp>


More information about the AppArmor mailing list