Marcus Rueckert
510b3fe972
- Fix for the apparmor profile to properly allow reading files from /etc/mosquitto/conf.d/ OBS-URL: https://build.opensuse.org/request/show/823457 OBS-URL: https://build.opensuse.org/package/show/network:messaging:mqtt/mosquitto?expand=0&rev=39
23 lines
578 B
Diff
23 lines
578 B
Diff
--- a/security/mosquitto.apparmor
|
|
+++ b/security/mosquitto.apparmor
|
|
@@ -1,3 +1,5 @@
|
|
+#include <tunables/global>
|
|
+
|
|
/usr/sbin/mosquitto {
|
|
#include <abstractions/base>
|
|
#include <abstractions/nameservice>
|
|
@@ -6,6 +8,7 @@
|
|
/etc/mosquitto/mosquitto.conf r,
|
|
/etc/mosquitto/ca_certificates/* r,
|
|
/etc/mosquitto/certs/* r,
|
|
+ /etc/mosquitto/conf.d/ r,
|
|
/etc/mosquitto/conf.d/* r,
|
|
/var/lib/mosquitto/ r,
|
|
/var/lib/mosquitto/mosquitto.db rwk,
|
|
@@ -24,4 +27,5 @@
|
|
/lib{,32,64}/libwrap.so* rm,
|
|
/etc/hosts.allow r,
|
|
/etc/hosts.deny r,
|
|
+ #include <local/usr.sbin.mosquitto>
|
|
}
|