diff --git a/apparmor-lessopen-nfs-workaround.diff b/apparmor-lessopen-nfs-workaround.diff index 783f991..570fbb0 100644 --- a/apparmor-lessopen-nfs-workaround.diff +++ b/apparmor-lessopen-nfs-workaround.diff @@ -11,5 +11,5 @@ Index: profiles/apparmor.d/usr.bin.lessopen.sh + network inet6 stream, + /** rk, - /bin/bash mrix, + /{usr/,}bin/bash mrix, /{usr/,}bin/rpm mrix, diff --git a/apparmor-lessopen-profile.patch b/apparmor-lessopen-profile.patch index 017e066..b9caf09 100644 --- a/apparmor-lessopen-profile.patch +++ b/apparmor-lessopen-profile.patch @@ -16,9 +16,9 @@ Index: profiles/apparmor.d/usr.bin.lessopen.sh + capability dac_read_search, + + /** rk, -+ /bin/bash mrix, ++ /{usr/,}bin/bash mrix, + /{usr/,}bin/rpm mrix, -+ /bin/tar mrix, ++ /{usr/,}bin/tar mrix, + /tmp/less.* rw, + /usr/bin/bzip2 mrix, + /usr/bin/cabextract mrix, diff --git a/apparmor.changes b/apparmor.changes index ffc85de..3aec344 100644 --- a/apparmor.changes +++ b/apparmor.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Sun Apr 14 13:59:55 UTC 2019 - Christian Boltz + +- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350) + ------------------------------------------------------------------- Thu Mar 7 12:34:20 UTC 2019 - Christian Boltz