2 Commits

Author	SHA256	Message	Date
Christian Boltz	5d66f079f8	Accepting request 212802 from home:cboltz ... - add permissions for kerberos replay cache to usr.lib.dovecot.auth - add permissions for /proc/*/mounts and /var/run/dovecot/mounts to usr.lib.dovecot.dovecot-lda - update changelog to mention apparmor-profiles-dovecot-bnc851984.diff and usr.lib.dovecot.* OBS-URL: https://build.opensuse.org/request/show/212802 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=70	2014-01-04 12:09:34 +00:00
Christian Boltz	07a11c242d	Accepting request 212635 from home:cboltz ... - add apparmor-profiles-samba-create-dirs.diff to allow samba to mkdir /var/run/samba and /var/cache/samba (bnc#856651) - add abstractions/samba to usr.sbin.winbindd profile - add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131) - update dovecot profiles to support dovecot 2.x, and add profiles for the parts of dovecot that were not covered yet (bnc#851984) NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs. - %restart_on_update (in parser %postun) is "translated" to stop/start by the systemd wrapper, which removes AppArmor protection from running processes. Fixed by using a custom script instead (bnc#853019) NOTE: The %postun from the previously installed apparmor-parser package will remove AppArmor protection from running processes a last time. Run aa-status to get a list of processes you need to restart, or reboot your computer. - reload profiles in %post of the apparmor-profiles package OBS-URL: https://build.opensuse.org/request/show/212635 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=69	2014-01-02 13:01:50 +00:00