pool/apparmor
SHA256
8
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1063513 from home:cboltz

Browse Source 
- add abstractions-openssl-1_1.diff: allow to read
  /etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911)

OBS-URL: https://build.opensuse.org/request/show/1063513
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=362
This commit is contained in:
Christian Boltz
2023-02-06 19:49:37 +00:00
committed by Git OBS Bridge
parent 4c137d697e
commit 01b087876d
3 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
abstractions-openssl-1_1.diff Normal file
View File

@@ -0,0 +1,12 @@
diff --git a/profiles/apparmor.d/abstractions/openssl b/profiles/apparmor.d/abstractions/openssl
index c0c09fb45..65939ae44 100644
--- a/profiles/apparmor.d/abstractions/openssl
+++ b/profiles/apparmor.d/abstractions/openssl
@@ -11,6 +11,7 @@
abi <abi/3.0>,
/etc/ssl/openssl.cnf r,
+ /etc/ssl/openssl-*.cnf r,
/etc/ssl/{engdef,engines}.d/ r,
/etc/ssl/{engdef,engines}.d/*.cnf r,
/usr/share/ssl/openssl.cnf r,

6
apparmor.changes
View File

@@ -1,3 +1,9 @@
-------------------------------------------------------------------
Mon Feb 6 19:27:40 UTC 2023 - Christian Boltz <suse-beta@cboltz.de>
- add abstractions-openssl-1_1.diff: allow to read
/etc/ssl/openssl-1_1.cnf in abstractions/openssl (boo#1207911)
-------------------------------------------------------------------
Mon Jan 30 11:33:05 UTC 2023 - Christian Boltz <suse-beta@cboltz.de>

4
apparmor.spec
View File

@@ -94,6 +94,9 @@ Patch12: dnsmasq-cpu-possible.diff
# allow nscd to read systemd userdb (boo#1207698, submitted upstream 2023-01-30 https://gitlab.com/apparmor/apparmor/-/merge_requests/977)
Patch13: nscd-systemd-userdb.diff
# abstractions/openssl: allow to read /etc/ssl/openssl-1_1.cnf (boo#1207911, upstreaming TODO)
Patch14: abstractions-openssl-1_1.diff
PreReq: sed
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: bison
@@ -360,6 +363,7 @@ mv -v profiles/apparmor.d/usr.lib.apache2.mpm-prefork.apache2 profiles/apparmor/
%patch6
%patch12 -p1
%patch13 -p1
%patch14 -p1
%build
export SUSE_ASNEEDED=0