mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 06:45:38 +00:00
Code Issues Releases Wiki Activity

dnsmasq: allow reading DNSSEC trust anchors

Browse Source 
At least on Debian, when DNSSEC validation is enabled, dnsmasq needs to read
/usr/share/dnsmasq-base/trust-anchors.conf

Bug-Debian: https://bugs.debian.org/934869
This commit is contained in:
intrigeri
2020-05-25 10:42:26 +00:00
parent f891dad070
commit 1b9469eb31
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/usr.sbin.dnsmasq
View File

@@ -53,8 +53,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq flags=(attach_disconnected) {
/var/log/dnsmasq*.log w, /var/log/dnsmasq*.log w,
/usr/share/dnsmasq/ r, /usr/share/dnsmasq{-base,}/ r,
/usr/share/dnsmasq/* r, /usr/share/dnsmasq{-base,}/* r,
@{run}/*dnsmasq*.pid w, @{run}/*dnsmasq*.pid w,
@{run}/dnsmasq-forwarders.conf r, @{run}/dnsmasq-forwarders.conf r,