From c4f1ebeb9aa741c583db2f4f63ab46f85ad1267a Mon Sep 17 00:00:00 2001 From: John Johansen Date: Mon, 17 Jan 2022 20:07:29 +0000 Subject: [PATCH] Merge abstractions/openssl: allow /etc/ssl/{engdef,engines}.d/ These directories were introduced in openssl in https://patchwork.ozlabs.org/project/openwrt/patch/20210429153530.10020-2-cotequeiroz@gmail.com/ I propose this patch for 3.0 and master. Optionally also for older branches, even if it's unlikely that systems using 2.13.x or older get a new-enough openssl to need this ;-) MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/818 Acked-by: John Johansen (cherry picked from commit 2b270216aa6485ed4a398e1eb57722d074ae3674) Signed-off-by: John Johansen --- profiles/apparmor.d/abstractions/openssl | 2 ++ 1 file changed, 2 insertions(+) diff --git a/profiles/apparmor.d/abstractions/openssl b/profiles/apparmor.d/abstractions/openssl index 697da7aeb..75b45ece0 100644 --- a/profiles/apparmor.d/abstractions/openssl +++ b/profiles/apparmor.d/abstractions/openssl @@ -9,6 +9,8 @@ # ------------------------------------------------------------------ /etc/ssl/openssl.cnf r, + /etc/ssl/{engdef,engines}.d/ r, + /etc/ssl/{engdef,engines}.d/*.cnf r, /usr/share/ssl/openssl.cnf r, @{PROC}/sys/crypto/fips_enabled r,