[apparmor] [PATCH profile 1/1] dnsmasq: Add permission to open log files

[Jamie Strandboge]

On Mon, 08 Oct 2018, Petr Vorel wrote:

> --log-facility option needs to have permission to open files.
> Use '*' to allow using more files (for using more dnsmasq instances).
> 
> Signed-off-by: Petr Vorel <pvorel at suse.cz>
> ---
>  profiles/apparmor.d/usr.sbin.dnsmasq | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/profiles/apparmor.d/usr.sbin.dnsmasq b/profiles/apparmor.d/usr.sbin.dnsmasq
> index 2b4b1bfc..f2e6847d 100644
> --- a/profiles/apparmor.d/usr.sbin.dnsmasq
> +++ b/profiles/apparmor.d/usr.sbin.dnsmasq
> @@ -45,6 +45,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq flags=(attach_disconnected) {
>  
>    /usr/{bin,sbin}/dnsmasq mr,
>  
> +  /var/log/*dnsmasq.log w,
> +

+1

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20181009/4f02176e/attachment.sig>