mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-03 07:45:50 +00:00
Code Issues Releases Wiki Activity

klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE.

Browse Source 
Therefore this patch updates the profile to follow the move and makes
sure the profiles are actually used.


Acked-by: Steve Beattie <steve@nxnw.org>
This commit is contained in:
Christian Boltz
2015-03-07 21:16:11 +01:00
parent d1900f42c7
commit 6eb46b7b0c
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/sbin.klogd
View File

@@ -11,7 +11,7 @@
#include <tunables/global> #include <tunables/global>
/sbin/klogd { profile klogd /{usr/,}sbin/klogd {
#include <abstractions/base> #include <abstractions/base>
capability sys_admin, # for backward compatibility with kernel <= 2.6.37 capability sys_admin, # for backward compatibility with kernel <= 2.6.37
@@ -24,7 +24,7 @@
@{PROC}/kallsyms r, @{PROC}/kallsyms r,
/dev/tty rw, /dev/tty rw,
/sbin/klogd rmix, /{usr/,}sbin/klogd rmix,
/var/log/boot.msg rwl, /var/log/boot.msg rwl,
/{,var/}run/klogd.pid krwl, /{,var/}run/klogd.pid krwl,
/{,var/}run/klogd/klogd.pid krwl, /{,var/}run/klogd/klogd.pid krwl,

4
profiles/apparmor.d/sbin.syslog-ng
View File

@@ -15,7 +15,7 @@
#define this to be where syslog-ng is chrooted #define this to be where syslog-ng is chrooted
@{CHROOT_BASE}="" @{CHROOT_BASE}=""
/sbin/syslog-ng { profile syslog-ng /{usr/,}sbin/syslog-ng {
#include <abstractions/base> #include <abstractions/base>
#include <abstractions/consoles> #include <abstractions/consoles>
#include <abstractions/nameservice> #include <abstractions/nameservice>
@@ -41,7 +41,7 @@
@{PROC}/kmsg r, @{PROC}/kmsg r,
/etc/hosts.deny r, /etc/hosts.deny r,
/etc/hosts.allow r, /etc/hosts.allow r,
/sbin/syslog-ng mr, /{usr/,}sbin/syslog-ng mr,
/sys/devices/system/cpu/online r, /sys/devices/system/cpu/online r,
/usr/share/syslog-ng/** r, /usr/share/syslog-ng/** r,
# chrooted applications # chrooted applications

4
profiles/apparmor.d/sbin.syslogd
View File

@@ -11,7 +11,7 @@
#include <tunables/global> #include <tunables/global>
/sbin/syslogd { profile syslogd /{usr/,}sbin/syslogd {
#include <abstractions/base> #include <abstractions/base>
#include <abstractions/nameservice> #include <abstractions/nameservice>
#include <abstractions/consoles> #include <abstractions/consoles>
@@ -32,7 +32,7 @@
/dev/tty* w, /dev/tty* w,
/dev/xconsole rw, /dev/xconsole rw,
/etc/syslog.conf r, /etc/syslog.conf r,
/sbin/syslogd rmix, /{usr/,}sbin/syslogd rmix,
/var/log/** rw, /var/log/** rw,
/{,var/}run/syslogd.pid krwl, /{,var/}run/syslogd.pid krwl,
/{,var/}run/utmp rw, /{,var/}run/utmp rw,