[apparmor] [patch] winbindd profile: allow dac_override

[Christian Boltz]

Hello,

$subject.

This is needed to delete kerberos ccache files, for details see
https://bugzilla.opensuse.org/show_bug.cgi?id=990006#c5


I propose this patch for trunk, 2.10 and 2.9.


[ winbind-dac_override.diff ]

=== modified file 'profiles/apparmor.d/usr.sbin.winbindd'
--- profiles/apparmor.d/usr.sbin.winbindd       2015-07-30 20:03:02 +0000
+++ profiles/apparmor.d/usr.sbin.winbindd       2016-07-26 19:15:17 +0000
@@ -7,6 +7,7 @@
 
   deny capability block_suspend,
 
+  capability dac_override,
   capability ipc_lock,
   capability setuid,
 




Regards,

Christian Boltz
-- 
<suseROCKs> mrdocs,   this is California.  Define "normal"
[from #opensuse-project]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160803/916af628/attachment.pgp>