mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-04 16:25:10 +00:00
Code Issues Releases Wiki Activity

Allow /usr/etc/ in abstractions/authentication

Browse Source 
openSUSE (and hopefully some other distributions) work on moving shipped
config files from /etc/ to /usr/etc/ so that /etc/ only contains files
written by the admin of each system.

See https://en.opensuse.org/openSUSE:Packaging_UsrEtc for details and
the first moved files.

Updating abstractions/authentication is the first step, and also fixes
bugzilla.opensuse.org/show_bug.cgi?id=1153162
This commit is contained in:
Christian Boltz
2019-10-07 21:47:25 +02:00
parent 5066dc6195
commit ee7194a714
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
profiles/apparmor.d/abstractions/authentication
View File

@@ -2,6 +2,7 @@
# #
# Copyright (C) 2002-2009 Novell/SUSE # Copyright (C) 2002-2009 Novell/SUSE
# Copyright (C) 2009-2012 Canonical Ltd # Copyright (C) 2009-2012 Canonical Ltd
# Copyright (C) 2019 Christian Boltz
# #
# This program is free software; you can redistribute it and/or # This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public # modify it under the terms of version 2 of the GNU General Public
@@ -14,13 +15,13 @@
# Some services need to perform authentication of users # Some services need to perform authentication of users
# Such authentication almost certainly needs access to the local users # Such authentication almost certainly needs access to the local users
# databases containing passwords, PAM configuration files, PAM libraries # databases containing passwords, PAM configuration files, PAM libraries
/etc/nologin r, /{usr/,}etc/nologin r,
/etc/pam.d/* r, /{usr/,}etc/pam.d/* r,
/etc/securetty r, /{usr/,}etc/securetty r,
/etc/security/* r, /{usr/,}etc/security/* r,
/etc/shadow r, /{usr/,}etc/shadow r,
/etc/gshadow r, /{usr/,}etc/gshadow r,
/etc/pwdb.conf r, /{usr/,}etc/pwdb.conf r,
/{usr/,}lib{,32,64}/security/pam_filter/* mr, /{usr/,}lib{,32,64}/security/pam_filter/* mr,
/{usr/,}lib{,32,64}/security/pam_*.so mr, /{usr/,}lib{,32,64}/security/pam_*.so mr,
@@ -32,8 +33,8 @@
# kerberos # kerberos
#include <abstractions/kerberosclient> #include <abstractions/kerberosclient>
# SuSE's pwdutils are different: # SuSE's pwdutils are different:
/etc/default/passwd r, /{usr/,}etc/default/passwd r,
/etc/login.defs r, /{usr/,}etc/login.defs r,
# nis # nis
#include <abstractions/nis> #include <abstractions/nis>