mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 06:16:03 +00:00
winbindd profile: allow dac_override
This is needed to delete kerberos ccache files, for details see https://bugzilla.opensuse.org/show_bug.cgi?id=990006#c5 Acked-by: Seth Arnold <seth.arnold@canonical.com> for trunk, 2.10 and 2.9. Acked-by: Steve Beattie <steve@nxnw.org> for trunk, 2.10 and 2.9.
This commit is contained in:
@@ -7,6 +7,7 @@
|
||||
|
||||
deny capability block_suspend,
|
||||
|
||||
capability dac_override,
|
||||
capability ipc_lock,
|
||||
capability setuid,
|
||||
|
||||
|
Reference in New Issue
Block a user