d5b46a0588
- add capability rules to updatedb AppArmor profile to allow running it as root (boo#1089594#c4) OBS-URL: https://build.opensuse.org/request/show/634228 OBS-URL: https://build.opensuse.org/package/show/server:search/mlocate?expand=0&rev=61
20 lines
376 B
Plaintext
20 lines
376 B
Plaintext
# Last Modified: Fri Apr 13 21:57:17 2018
|
|
#include <tunables/global>
|
|
|
|
/usr/bin/updatedb {
|
|
#include <abstractions/base>
|
|
|
|
capability dac_override,
|
|
capability dac_read_search,
|
|
capability fowner,
|
|
|
|
/ r,
|
|
/**/ r,
|
|
/etc/updatedb.conf r,
|
|
/usr/bin/updatedb mr,
|
|
owner /proc/@{pid}/mounts r,
|
|
/var/lib/mlocate/mlocate.db rwk,
|
|
/var/lib/mlocate/mlocate.db.?????? rw,
|
|
|
|
}
|