4c0a0a0ace
- lessopen.sh profile: allow reading files that live on NFS over UDP (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552) OBS-URL: https://build.opensuse.org/request/show/920053 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=307
18 lines
730 B
Diff
18 lines
730 B
Diff
Index: profiles/apparmor.d/usr.bin.lessopen.sh
|
|
===================================================================
|
|
--- profiles/apparmor.d/usr.bin.lessopen.sh.orig 2021-09-18 15:15:00.967216031 +0200
|
|
+++ profiles/apparmor.d/usr.bin.lessopen.sh 2021-09-18 15:18:35.731065782 +0200
|
|
@@ -13,6 +13,12 @@ abi <abi/3.0>,
|
|
capability dac_override,
|
|
capability dac_read_search,
|
|
|
|
+ # workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1119937 / http://bugzilla.opensuse.org/show_bug.cgi?id=1190552 / https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784499
|
|
+ network inet dgram,
|
|
+ network inet6 dgram,
|
|
+ network inet stream,
|
|
+ network inet6 stream,
|
|
+
|
|
/** rk,
|
|
/{usr/,}bin/bash mrix,
|
|
/{usr/,}bin/rpm mrix,
|