mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 05:47:59 +00:00
Code Issues Releases Wiki Activity

dnsmasq profile - also allow /bin/sh

Browse Source 
This patch is based on a SLE12 patch to allow executing the
--dhcp-script. We already have most parts of that patch since r2841,
however the SLE bugreport indicates that /bin/sh is executed (which is
usually a symlink to /bin/bash or /bin/dash), so we should also allow
/bin/sh

References: https://bugzilla.opensuse.org/show_bug.cgi?id=940749 (non-public)


Acked-by: Seth Arnold <seth.arnold@canonicalc.com> for trunk and 2.9
This commit is contained in:
Christian Boltz 2015-09-18 19:06:47 +02:00
parent dbcb634e2e
commit 562c98d77c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
profiles/apparmor.d/usr.sbin.dnsmasq
View File

@ -45,7 +45,7 @@
/var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage
/bin/{b,d}ash ix, # Required to execute --dhcp-script argument
/bin/{ba,da,}sh ix, # Required to execute --dhcp-script argument
# access to iface mtu needed for Router Advertisement messages in IPv6
# Neighbor Discovery protocol (RFC 2461)