2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 06:16:03 +00:00

profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2

https://launchpad.net/bugs/1210514

It looks plausible to me that prefork_open_logs() ->
ap_proc_mutex_create() -> ap_unixd_set_proc_mutex_perms() -> chown().

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Acked-by: Steve Beattie <steve@nxnw.org>
This commit is contained in:
Tyler Hicks
2016-03-19 03:10:00 -05:00
parent f16e6ad89a
commit c8fe0b2518

View File

@@ -42,6 +42,7 @@
#include <abstractions/base>
#include <abstractions/nameservice>
capability chown,
capability kill,
capability net_bind_service,
capability setgid,