[apparmor] [patch] [2.8 branch] backport nscd profile additions from 2.9 branch

Seth Arnold seth.arnold at canonical.com
Fri Apr 15 20:57:25 UTC 2016


On Fri, Apr 15, 2016 at 10:51:10PM +0200, Christian Boltz wrote:
> Hello,
> 
> in the backport patch, I overlooked some real changes in the nscd 
> profile. Here they are:

Assuming all these extra trailing spaces aren't in the patch as committed,
Acked-by: Seth Arnold <seth.arnold at canonical.com>

Thanks
> 
> === modified file 'profiles/apparmor.d/usr.sbin.nscd'                                                                                                                                                                                                                          
> --- profiles/apparmor.d/usr.sbin.nscd   2013-03-05 21:12:37 +0000                                                                                                                                                                                                              
> +++ profiles/apparmor.d/usr.sbin.nscd   2016-04-15 20:49:15 +0000                                                                                                                                                                                                              
> @@ -34,9 +34,10 @@                                                                                                                                                                                                                                                             
>    /{,var/}run/nscd/ rw,                                                                                                                                                                                                                                                       
>    /{,var/}run/nscd/db* rwl,                                                                                                                                                                                                                                                   
>    /{,var/}run/nscd/socket wl,                                                                                                                                                                                                                                                 
> -  /var/{cache,run}/nscd/{passwd,group,services,hosts,netgroup} rw,                                                                                                                                                                                                            
> +  /{var/cache,var/run,run}/nscd/{passwd,group,services,hosts,netgroup} rw,                                                                                                                                                                                                    
>    /{,var/}run/{nscd/,}nscd.pid rwl,                                                                                                                                                                                                                                           
>    /var/log/nscd.log rw,                                                                                                                                                                                                                                                       
> +  @{PROC}/[0-9]*/cmdline r,                                                                                                                                                                                                                                                   
>    @{PROC}/[0-9]*/fd/ r,                                                                                                                                                                                                                                                       
>    @{PROC}/[0-9]*/fd/* r,                                                                                                                                                                                                                                                      
>    @{PROC}/[0-9]*/maps r,                                                                                                                                                                                                                                                      
>                                                                                                                                                                                                                                                                                
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160415/fdbe4dd7/attachment.pgp>


More information about the AppArmor mailing list