4677ecc2c8
- update to AppArmor 3.1.5 - fix handling of mount rules in apparmor_parser - minor additions to abstractions/base and snap_browsers - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5 for the full upstream changelog - remove upstreamed aa-status-fix-json-mr1046.patch - split off apparmor-enable-precompiled-cache.diff from apparmor-enable-profile-cache.diff so that the precompiled cache path doesn't get added in parser.conf for Tumbleweed builds. This prevents a warning about the non-existing directory when loading profiles. OBS-URL: https://build.opensuse.org/request/show/1092349 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=372
27 lines
830 B
Diff
27 lines
830 B
Diff
Set the cache location to /var/cache/apparmor/ (writeable) and
|
|
/usr/share/apparmor/cache/ (packaged precompiled cache).
|
|
|
|
See boo#1069906 and boo#1074429
|
|
|
|
Note that Tumbleweed packages don't include precompiled profile cache on
|
|
Tumbleweed as long as it's purely validated based on timestamps (boo#1205659)
|
|
|
|
|
|
Signed-off by: Christian Boltz <apparmor@cboltz.de>
|
|
|
|
Index: parser/parser.conf
|
|
===================================================================
|
|
--- parser/parser.conf_ORIG 2018-04-19 22:47:18.485179998 +0200
|
|
+++ parser/parser.conf 2018-04-19 22:51:12.084588654 +0200
|
|
@@ -31,6 +31,9 @@
|
|
|
|
## Turn creating/updating of the cache on by default
|
|
write-cache
|
|
+
|
|
+# cache location (cache writes go to the first directory in the list)
|
|
+cache-loc /var/cache/apparmor,/usr/share/apparmor/cache
|
|
|
|
## Show cache hits
|
|
#show-cache
|
|
|