pool/apparmor
SHA256
4
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 534597 from security:apparmor

Browse Source 
- add nameservice-libtirpc.diff to fix NIS/YP logins (forwarded request 534596 from cboltz)

OBS-URL: https://build.opensuse.org/request/show/534597
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=106
This commit is contained in:
Dominique Leuenberger 2017-10-23 14:40:36 +00:00 committed by Git OBS Bridge
commit 56e1a28d47
3 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apparmor.changes
View File

@ -1,3 +1,8 @@
-------------------------------------------------------------------
Tue Oct 17 21:42:38 UTC 2017 - suse-beta@cboltz.de
- add nameservice-libtirpc.diff to fix NIS/YP logins
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Oct 3 16:28:52 UTC 2017 - rgoldwyn@suse.com Tue Oct 3 16:28:52 UTC 2017 - rgoldwyn@suse.com

4
apparmor.spec
View File

@ -92,6 +92,9 @@ Patch14: apparmor-fix-podsyntax.patch
# TODO: replace with proper unix rules when Kernel 4.15 arrives # TODO: replace with proper unix rules when Kernel 4.15 arrives
Patch15: profiles-sockets-temporary-fix.patch Patch15: profiles-sockets-temporary-fix.patch
# fix NIS/YP logins - libtirpc needs to read /etc/netconfig
Patch16: nameservice-libtirpc.diff
PreReq: sed PreReq: sed
BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRoot: %{_tmppath}/%{name}-%{version}-build
%define apparmor_bin_prefix /lib/apparmor %define apparmor_bin_prefix /lib/apparmor
@ -400,6 +403,7 @@ touch libraries/libapparmor/testsuite/test_multi/unconfined-change_hat.err
%patch13 -p1 %patch13 -p1
%patch14 -p1 %patch14 -p1
%patch15 -p1 %patch15 -p1
%patch16
# search for left-over multiline rules # search for left-over multiline rules
test -z "$(grep -r '^\s*\(unix\|dbus\)[^,]\(([^)]*)\)*[^,]*$' profiles/apparmor.d/)" test -z "$(grep -r '^\s*\(unix\|dbus\)[^,]\(([^)]*)\)*[^,]*$' profiles/apparmor.d/)"

13
nameservice-libtirpc.diff Normal file
View File

@ -0,0 +1,13 @@
=== modified file 'profiles/apparmor.d/abstractions/nameservice'
--- profiles/apparmor.d/abstractions/nameservice 2017-09-15 20:47:26 +0000
+++ profiles/apparmor.d/abstractions/nameservice 2017-10-17 21:29:36 +0000
@@ -21,6 +21,9 @@
/etc/passwd r,
/etc/protocols r,
+ # libtirpc (used for NIS/YP login) needs this
+ /etc/netconfig r,
+
# When using libnss-extrausers, the passwd and group files are merged from
# an alternate path
/var/lib/extrausers/group r,