Description: Allow using sssd for group and password lookups
Index: apparmor/profiles/apparmor.d/abstractions/nameservice
===================================================================
--- apparmor.orig/profiles/apparmor.d/abstractions/nameservice	2013-11-29 13:31:27.462965841 -0500
+++ apparmor/profiles/apparmor.d/abstractions/nameservice	2013-11-29 13:32:05.286964238 -0500
@@ -21,6 +21,12 @@
   /etc/passwd             r,
   /etc/protocols          r,
 
+  # When using sssd, the passwd and group files are stored in an alternate path
+  # and the nss plugin also needs to talk to a pipe
+  /var/lib/sss/mc/group   r,
+  /var/lib/sss/mc/passwd  r,
+  /var/lib/sss/pipes/nss  rw,
+
   /etc/resolv.conf        r,
   # on systems using resolvconf, /etc/resolv.conf is a symlink to
   # /{,var/}run/resolvconf/resolv.conf and a file sometimes referenced in


