diff --git a/apparmor-systemd-sessions.patch b/apparmor-systemd-sessions.patch new file mode 100644 index 0000000..e74f094 --- /dev/null +++ b/apparmor-systemd-sessions.patch @@ -0,0 +1,11 @@ +--- apparmor-3.1.6/profiles/apparmor.d/abstractions/wutmp.orig 2023-06-21 23:13:41.000000000 +0200 ++++ apparmor-3.1.6/profiles/apparmor.d/abstractions/wutmp 2023-11-08 14:45:19.882328152 +0100 +@@ -18,5 +18,8 @@ + /var/log/btmp rwk, + @{run}/utmp rwk, + ++ # Some read the list of sessions from systemd ++ /run/systemd/sessions/ r, ++ + # Include additions to the abstraction + include if exists diff --git a/apparmor.changes b/apparmor.changes index 4ef333c..6d359ca 100644 --- a/apparmor.changes +++ b/apparmor.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Nov 8 13:47:35 UTC 2023 - Julio Gonzalez Gil + +- Add apparmor-systemd-sessions.patch to allow read access to + /run/systemd/sessions/ (bsc#1216878) + ------------------------------------------------------------------- Mon Sep 25 14:07:39 UTC 2023 - David Disseldorp diff --git a/apparmor.spec b/apparmor.spec index 2110c5a..2b54338 100644 --- a/apparmor.spec +++ b/apparmor.spec @@ -92,6 +92,10 @@ Patch6: apache-extra-profile-include-if-exists.diff # add path for precompiled cache (only done/applied if precompiled_cache is enabled) Patch7: apparmor-enable-precompiled-cache.diff +# To allow access to /run/systemd/sessions/ until the next release including the fix +# for https://gitlab.com/apparmor/apparmor/-/issues/360 is out +Patch8: apparmor-systemd-sessions.patch + PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: bison