pool/apparmor
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 920053 from home:cboltz

Browse Source 
- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)

OBS-URL: https://build.opensuse.org/request/show/920053
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=307
This commit is contained in:
Christian Boltz 2021-09-18 13:20:11 +00:00 committed by Git OBS Bridge
parent 102dd5dab3
commit 4c0a0a0ace
2 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
apparmor-lessopen-nfs-workaround.diff
View File

@ -1,12 +1,14 @@
Index: profiles/apparmor.d/usr.bin.lessopen.sh
===================================================================
--- profiles/apparmor.d/usr.bin.lessopen.sh.orig 2019-01-06 20:05:38.582356924 +0100
+++ profiles/apparmor.d/usr.bin.lessopen.sh 2019-01-06 20:08:26.885706133 +0100
@@ -13,6 +13,10 @@
--- profiles/apparmor.d/usr.bin.lessopen.sh.orig 2021-09-18 15:15:00.967216031 +0200
+++ profiles/apparmor.d/usr.bin.lessopen.sh 2021-09-18 15:18:35.731065782 +0200
@@ -13,6 +13,12 @@ abi <abi/3.0>,
capability dac_override,
capability dac_read_search,
+ # workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1119937 / https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784499
+ # workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1119937 / http://bugzilla.opensuse.org/show_bug.cgi?id=1190552 / https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784499
+ network inet dgram,
+ network inet6 dgram,
+ network inet stream,
+ network inet6 stream,
+

6
apparmor.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Sat Sep 18 13:16:35 UTC 2021 - Christian Boltz <suse-beta@cboltz.de>
- lessopen.sh profile: allow reading files that live on NFS over UDP
(added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)
-------------------------------------------------------------------
Wed Aug 11 19:44:15 UTC 2021 - Christian Boltz <suse-beta@cboltz.de>