mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 14:55:10 +00:00
Code Issues Releases Wiki Activity

profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2

Browse Source 
https://launchpad.net/bugs/1210514

It looks plausible to me that prefork_open_logs() ->
ap_proc_mutex_create() -> ap_unixd_set_proc_mutex_perms() -> chown().

Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
Acked-by: Steve Beattie <steve@nxnw.org>
This commit is contained in:
Tyler Hicks
2016-03-19 03:10:00 -05:00
parent f16e6ad89a
commit c8fe0b2518
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/apparmor.d/usr.lib.apache2.mpm-prefork.apache2
View File

@@ -42,6 +42,7 @@
#include <abstractions/base> #include <abstractions/base>
#include <abstractions/nameservice> #include <abstractions/nameservice>
capability chown,
capability kill, capability kill,
capability net_bind_service, capability net_bind_service,
capability setgid, capability setgid,