[apparmor] One-line addition to the `man` profile

Seth Arnold seth.arnold at canonical.com
Sat Aug 19 01:16:37 UTC 2017


On Thu, Aug 17, 2017 at 10:47:05PM +0300, artiom wrote:
> $ man select
> man: can't open /usr/share/postgresql/9.6/man/man7/SELECT.7.gz:
> Отказано в доступе

I slightly modified artiom's suggestion. It might not make a difference
with our DFA walking but it'd help regular regex engines.

Signed-off-by: Seth Arnold <seth.arnold at canonical.com>

Thanks

=== modified file 'profiles/apparmor/profiles/extras/usr.lib.man-db.man'
--- profiles/apparmor/profiles/extras/usr.lib.man-db.man	2016-12-03 09:59:01 +0000
+++ profiles/apparmor/profiles/extras/usr.lib.man-db.man	2017-08-19 01:14:01 +0000
@@ -61,6 +61,7 @@
   /usr/share/man/** r,
   /usr/share/terminfo/** r,
   /usr/share/texmf/teTeX/man/** r,
+  /usr/share/postgresql/*/man/** rk,
 
   /var/cache/man/** rk,
 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20170818/0f622dce/attachment.pgp>


More information about the AppArmor mailing list