From 1c1cc65cbdbbd182b2b47c75c155a053b0742f3d Mon Sep 17 00:00:00 2001
From: Steve Beattie <sbeattie@ubuntu.com>
Date: Fri, 26 Aug 2011 18:58:31 -0700
Subject: [PATCH] Update useradd and userdel profiles to use wutmp abstraction.

---
 profiles/apparmor/profiles/extras/usr.sbin.useradd | 3 +--
 profiles/apparmor/profiles/extras/usr.sbin.userdel | 3 +--
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/profiles/apparmor/profiles/extras/usr.sbin.useradd b/profiles/apparmor/profiles/extras/usr.sbin.useradd
index 0c91e5914..4c9eb8b33 100644
--- a/profiles/apparmor/profiles/extras/usr.sbin.useradd
+++ b/profiles/apparmor/profiles/extras/usr.sbin.useradd
@@ -18,6 +18,7 @@
   #include <abstractions/perl>
   #include <abstractions/consoles>
   #include <abstractions/nameservice>
+  #include <abstractions/wutmp>
 
   capability chown,
   capability dac_override,
@@ -44,8 +45,6 @@
   /usr/sbin/useradd rmix,
   /usr/sbin/useradd.local rmix,
   /var/log/faillog rw,
-  /var/log/lastlog rw,
   /{,var/}run/nscd.pid rw,
-  /{,var/}run/utmp rw,
   /var/spool/mail/* rw,
 }
diff --git a/profiles/apparmor/profiles/extras/usr.sbin.userdel b/profiles/apparmor/profiles/extras/usr.sbin.userdel
index 2aef51828..6103388f8 100644
--- a/profiles/apparmor/profiles/extras/usr.sbin.userdel
+++ b/profiles/apparmor/profiles/extras/usr.sbin.userdel
@@ -18,6 +18,7 @@
   #include <abstractions/consoles>
   #include <abstractions/perl>
   #include <abstractions/nameservice>
+  #include <abstractions/wutmp>
 
   capability chown,
   capability dac_override,
@@ -44,9 +45,7 @@
   /usr/sbin/userdel-post.local rmix,
   /usr/sbin/userdel-pre.local rmix,
   /usr/sbin/userdel rmix,
-  /var/log/lastlog rw,
   # XXX
   /{,var/}run/nscd.pid r,
-  /{,var/}run/utmp rw,
   /var/spool/mail/* wl,
 }