[apparmor] [PATCH profile 1/1] dnsmasq: Add permission to open log files

Petr Vorel pvorel at suse.cz
Tue Oct 9 16:18:39 UTC 2018


Hi,

...
> +++ b/profiles/apparmor.d/usr.sbin.dnsmasq
> @@ -45,6 +45,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq flags=(attach_disconnected) {

>    /usr/{bin,sbin}/dnsmasq mr,

> +  /var/log/*dnsmasq.log w,
> +
I see other wildcards in usr.sbin.dnsmasq (for lxc and NetworkManager) are in
patter of suffices. So if you don't like the previous pattern, it could be also:
/var/log/dnsmasq.log w,
/var/log/dnsmasq.*.log w,

Kind regards,
Petr



More information about the AppArmor mailing list