apparmor/apparmor-lessopen-nfs-workaround.diff

Index: profiles/apparmor.d/usr.bin.lessopen.sh
===================================================================
--- profiles/apparmor.d/usr.bin.lessopen.sh.orig	2021-09-18 15:15:00.967216031 +0200
+++ profiles/apparmor.d/usr.bin.lessopen.sh	2021-09-18 15:18:35.731065782 +0200
@@ -13,6 +13,12 @@ abi <abi/3.0>,
   capability dac_override,
   capability dac_read_search,
 
+  # workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1119937 / http://bugzilla.opensuse.org/show_bug.cgi?id=1190552 / https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784499
+  network inet dgram,
+  network inet6 dgram,
+  network inet stream,
+  network inet6 stream,
+
   /** rk,
   /{usr/,}bin/bash mrix,
   /{usr/,}bin/rpm mrix,
Accepting request 663645 from home:cboltz - add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499) OBS-URL: https://build.opensuse.org/request/show/663645 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=229 2019-01-08 13:18:00 +01:00			`Index: profiles/apparmor.d/usr.bin.lessopen.sh`
			`===================================================================`
Accepting request 920053 from home:cboltz - lessopen.sh profile: allow reading files that live on NFS over UDP (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552) OBS-URL: https://build.opensuse.org/request/show/920053 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=307 2021-09-18 15:20:11 +02:00			`--- profiles/apparmor.d/usr.bin.lessopen.sh.orig 2021-09-18 15:15:00.967216031 +0200`
			`+++ profiles/apparmor.d/usr.bin.lessopen.sh 2021-09-18 15:18:35.731065782 +0200`
			`@@ -13,6 +13,12 @@ abi <abi/3.0>,`
Accepting request 663645 from home:cboltz - add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499) OBS-URL: https://build.opensuse.org/request/show/663645 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=229 2019-01-08 13:18:00 +01:00			`capability dac_override,`
			`capability dac_read_search,`

Accepting request 920053 from home:cboltz - lessopen.sh profile: allow reading files that live on NFS over UDP (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552) OBS-URL: https://build.opensuse.org/request/show/920053 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=307 2021-09-18 15:20:11 +02:00			`+ # workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1119937 / http://bugzilla.opensuse.org/show_bug.cgi?id=1190552 / https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784499`
			`+ network inet dgram,`
			`+ network inet6 dgram,`
Accepting request 663645 from home:cboltz - add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499) OBS-URL: https://build.opensuse.org/request/show/663645 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=229 2019-01-08 13:18:00 +01:00			`+ network inet stream,`
			`+ network inet6 stream,`
			`+`
			`/** rk,`
Accepting request 694059 from home:cboltz - update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) OBS-URL: https://build.opensuse.org/request/show/694059 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=240 2019-04-14 17:15:50 +02:00			`/{usr/,}bin/bash mrix,`
Accepting request 663645 from home:cboltz - add apparmor-lessopen-nfs-workaround.diff: allow network access in lessopen.sh for reading files on NFS (workaround for boo#1119937 / lp#1784499) OBS-URL: https://build.opensuse.org/request/show/663645 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=229 2019-01-08 13:18:00 +01:00			`/{usr/,}bin/rpm mrix,`