mosquitto/mosquitto-1.4.1_apparmor.patch
Martin Hauke 6ec9fafbcc Accepting request 766422 from home:jimfunk:branches:network:messaging:mqtt
- Update apparmor profile to allow open of /etc/mosquitto/conf.d
- Update default config to include files under /etc/mosquitto/conf.d
  per the README in the directory

OBS-URL: https://build.opensuse.org/request/show/766422
OBS-URL: https://build.opensuse.org/package/show/network:messaging:mqtt/mosquitto?expand=0&rev=32
2020-01-23 13:50:58 +00:00

23 lines
577 B
Diff

--- a/security/mosquitto.apparmor
+++ b/security/mosquitto.apparmor
@@ -1,3 +1,5 @@
+#include <tunables/global>
+
/usr/sbin/mosquitto {
#include <abstractions/base>
#include <abstractions/nameservice>
@@ -6,6 +8,7 @@
/etc/mosquitto/mosquitto.conf r,
/etc/mosquitto/ca_certificates/* r,
/etc/mosquitto/certs/* r,
+ /etc/mosquitto/conf.d r,
/etc/mosquitto/conf.d/* r,
/var/lib/mosquitto/ r,
/var/lib/mosquitto/mosquitto.db rwk,
@@ -24,4 +27,5 @@
/lib{,32,64}/libwrap.so* rm,
/etc/hosts.allow r,
/etc/hosts.deny r,
+ #include <local/usr.sbin.mosquitto>
}