Christian Boltz
778bd0c3fa
- Backport dnsmasq fix:
025c7dc6 ("dnsmasq: Add permission to open log files")
(boo#1111342)
OBS-URL: https://build.opensuse.org/request/show/640981
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=220
29 lines
959 B
Diff
29 lines
959 B
Diff
From 025c7dc6a131da24c31e41ad32753015a0ec0f76 Mon Sep 17 00:00:00 2001
|
|
From: Petr Vorel <pvorel@suse.cz>
|
|
Date: Mon, 8 Oct 2018 16:44:01 +0200
|
|
Subject: [PATCH] dnsmasq: Add permission to open log files
|
|
|
|
--log-facility option needs to have permission to open files.
|
|
Use '*' to allow using more files (for using more dnsmasq instances).
|
|
|
|
Signed-off-by: Petr Vorel <pvorel@suse.cz>
|
|
Signed-off-by: Jamie Strandboge <jamie@canonical.com>
|
|
Signed-off-by: Steve Beattie <steve.beattie@canonical.com>
|
|
---
|
|
profiles/apparmor.d/usr.sbin.dnsmasq | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/profiles/apparmor.d/usr.sbin.dnsmasq b/profiles/apparmor.d/usr.sbin.dnsmasq
|
|
index 2b4b1bfc..f2e6847d 100644
|
|
--- a/profiles/apparmor.d/usr.sbin.dnsmasq
|
|
+++ b/profiles/apparmor.d/usr.sbin.dnsmasq
|
|
@@ -43,6 +43,8 @@
|
|
|
|
/usr/sbin/dnsmasq mr,
|
|
|
|
+ /var/log/*dnsmasq.log w,
|
|
+
|
|
/{,var/}run/*dnsmasq*.pid w,
|
|
/{,var/}run/dnsmasq-forwarders.conf r,
|
|
/{,var/}run/dnsmasq/ r,
|