From 0be90d66be2c05fa32c839170486525029e9bb37 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Wed, 8 Nov 2023 18:16:47 +0000 Subject: [PATCH] Merge Allow reading /run/systemd/sessions/ Several applications use it now that utmp and wtmp are being removed because they are not Y2038 compliant This is the case for example in openSUSE Tumbleweed and openSUSE MicroOS: https://microos.opensuse.org/blog/2023-11-06-utmp-and-wtmp-are-gone/ Closes https://gitlab.com/apparmor/apparmor/-/issues/360 Closes #360 Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1216878 MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1121 Approved-by: Christian Boltz Merged-by: Christian Boltz (cherry picked from commit 9bba464d931af09e6d8e6c29b206af4c877123fc) 96b1aa54 Allow reading /run/systemd/sessions/ --- profiles/apparmor.d/abstractions/wutmp | 3 +++ 1 file changed, 3 insertions(+) diff --git a/profiles/apparmor.d/abstractions/wutmp b/profiles/apparmor.d/abstractions/wutmp index 46d33f795..a085c3c91 100644 --- a/profiles/apparmor.d/abstractions/wutmp +++ b/profiles/apparmor.d/abstractions/wutmp @@ -18,5 +18,8 @@ /var/log/btmp rwk, @{run}/utmp rwk, + # Some read the list of sessions from systemd + /run/systemd/sessions/ r, + # Include additions to the abstraction include if exists