Accepting request 733763 from home:luizluca:branches:security:apparmor

- add apparmor-krb5-conf-d.diff for kerberos client

Since https://build.opensuse.org/package/rdiff/network/krb5?linkrev=base&rev=204, it is possible to use configuration snippets for krb5.conf. However, any service under apparmor will not be able to read it.

As /etc/krb5.conf.d is default for SUSE but not for upstream apparmor, the patch might not be accepted upstream.

LEAP15(.1) should also get this fix.

OBS-URL: https://build.opensuse.org/request/show/733763
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=249

apparmor.spec

@@ -65,6 +65,9 @@ Patch4:         apparmor-lessopen-profile.patch
 # workaround for boo#1119937 / lp#1784499 - allow network access for reading files on NFS (proper solution needs kernel fix)
 Patch5:         apparmor-lessopen-nfs-workaround.diff
 
+# allow /etc/krb5.conf.d/ for kerberos client
+Patch6:         apparmor-krb5-conf-d.diff
+
 PreReq:         sed
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %define apparmor_bin_prefix /lib/apparmor
@@ -353,6 +356,7 @@ SubDomain.
 %patch3 -p1
 %patch4
 %patch5
+%patch6 -p1
 
 %build
 %define _lto_cflags %{nil}