mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 13:58:22 +00:00
Code Issues Releases Wiki Activity

Update useradd and userdel profiles to use wutmp abstraction.

Browse Source
This commit is contained in:
Steve Beattie
2011-08-26 18:58:31 -07:00
parent 5dedd16bf5
commit 1c1cc65cbd
2 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
profiles/apparmor/profiles/extras/usr.sbin.useradd
View File

@@ -18,6 +18,7 @@
#include <abstractions/perl> #include <abstractions/perl>
#include <abstractions/consoles> #include <abstractions/consoles>
#include <abstractions/nameservice> #include <abstractions/nameservice>
#include <abstractions/wutmp>
capability chown, capability chown,
capability dac_override, capability dac_override,
@@ -44,8 +45,6 @@
/usr/sbin/useradd rmix, /usr/sbin/useradd rmix,
/usr/sbin/useradd.local rmix, /usr/sbin/useradd.local rmix,
/var/log/faillog rw, /var/log/faillog rw,
/var/log/lastlog rw,
/{,var/}run/nscd.pid rw, /{,var/}run/nscd.pid rw,
/{,var/}run/utmp rw,
/var/spool/mail/* rw, /var/spool/mail/* rw,
} }

3
profiles/apparmor/profiles/extras/usr.sbin.userdel
View File

@@ -18,6 +18,7 @@
#include <abstractions/consoles> #include <abstractions/consoles>
#include <abstractions/perl> #include <abstractions/perl>
#include <abstractions/nameservice> #include <abstractions/nameservice>
#include <abstractions/wutmp>
capability chown, capability chown,
capability dac_override, capability dac_override,
@@ -44,9 +45,7 @@
/usr/sbin/userdel-post.local rmix, /usr/sbin/userdel-post.local rmix,
/usr/sbin/userdel-pre.local rmix, /usr/sbin/userdel-pre.local rmix,
/usr/sbin/userdel rmix, /usr/sbin/userdel rmix,
/var/log/lastlog rw,
# XXX # XXX
/{,var/}run/nscd.pid r, /{,var/}run/nscd.pid r,
/{,var/}run/utmp rw,
/var/spool/mail/* wl, /var/spool/mail/* wl,
} }