[apparmor] [patch] nscd profile: allow reading libvirt/dnsmasq/*.status

Christian Boltz apparmor at cboltz.de
Thu Dec 8 13:58:51 UTC 2016


Hello,

$subject.

References: https://bugzilla.opensuse.org/show_bug.cgi?id=1014463


I propose this patch for trunk, 2.10 and 2.9.


[ nscd-libvirt.diff ]

=== modified file 'profiles/apparmor.d/usr.sbin.nscd'
--- profiles/apparmor.d/usr.sbin.nscd   2016-11-18 19:17:43 +0000
+++ profiles/apparmor.d/usr.sbin.nscd   2016-12-08 13:55:07 +0000
@@ -30,6 +30,8 @@
   /{,var/}run/nscd/socket wl,
   /{var/cache,var/lib,var/run,run}/nscd/{passwd,group,services,hosts,netgroup} rw,
   /{,var/}run/{nscd/,}nscd.pid rwl,
+  /var/lib/libvirt/dnsmasq/ r,
+  /var/lib/libvirt/dnsmasq/*.status r,
   /var/log/nscd.log rw,
   @{PROC}/@{pid}/cmdline r,
   @{PROC}/@{pid}/fd/ r,




Regards,

Christian Boltz
-- 
Yes, basil troll, the opensuse release manager, long time kde developer,
and member of the opensuse board is not a linux person, he doesnt
understand linux like you, oh, great linux overlord you are, he is just
a newbie who doesnt know what he is doing. You are so cute you must poop
rainbows. [Druid in opensuse-factory]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161208/f2202ade/attachment.pgp>


More information about the AppArmor mailing list