Marcus Rueckert
f270973a6c
Accepted submit request 57745 from user jeff_mahoney OBS-URL: https://build.opensuse.org/request/show/57745 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=1
60 lines
1.9 KiB
Plaintext
60 lines
1.9 KiB
Plaintext
Index: apparmor-2.5.1/profiles/apparmor.d/abstractions/ldapclient
|
|
===================================================================
|
|
--- /dev/null
|
|
+++ apparmor-2.5.1/profiles/apparmor.d/abstractions/ldapclient
|
|
@@ -0,0 +1,21 @@
|
|
+# ------------------------------------------------------------------
|
|
+#
|
|
+# Copyright (C) 2011 Novell/SUSE
|
|
+#
|
|
+# This program is free software; you can redistribute it and/or
|
|
+# modify it under the terms of version 2 of the GNU General Public
|
|
+# License published by the Free Software Foundation.
|
|
+#
|
|
+# ------------------------------------------------------------------
|
|
+
|
|
+ # files required by LDAP clients (e.g. nss_ldap/pam_ldap)
|
|
+ /etc/ldap.conf r,
|
|
+ /etc/ldap.secret r,
|
|
+ /etc/openldap/* r,
|
|
+ /etc/openldap/cacerts/* r,
|
|
+
|
|
+ # SASL plugins and config
|
|
+ /etc/sasl2/* r,
|
|
+ /usr/lib{,32,64}/sasl2/* r,
|
|
+
|
|
+ #include <abstractions/ssl_certs>
|
|
Index: apparmor-2.5.1/profiles/apparmor.d/abstractions/nameservice
|
|
===================================================================
|
|
--- apparmor-2.5.1.orig/profiles/apparmor.d/abstractions/nameservice
|
|
+++ apparmor-2.5.1/profiles/apparmor.d/abstractions/nameservice
|
|
@@ -17,8 +17,6 @@
|
|
/etc/group r,
|
|
/etc/host.conf r,
|
|
/etc/hosts r,
|
|
- /etc/ldap.conf r,
|
|
- /etc/ldap.secret r,
|
|
/etc/nsswitch.conf r,
|
|
/etc/gai.conf r,
|
|
/etc/passwd r,
|
|
@@ -33,9 +31,6 @@
|
|
|
|
/etc/samba/lmhosts r,
|
|
/etc/services r,
|
|
- # all openldap config
|
|
- /etc/openldap/* r,
|
|
- /etc/ldap/** r,
|
|
# db backend
|
|
/var/lib/misc/*.db r,
|
|
# The Name Service Cache Daemon can cache lookups, sometimes leading
|
|
@@ -59,6 +54,9 @@
|
|
# nis
|
|
#include <abstractions/nis>
|
|
|
|
+ # ldap
|
|
+ #include <abstractions/ldapclient>
|
|
+
|
|
# winbind
|
|
#include <abstractions/winbind>
|
|
|