Accepting request 694064 from home:cboltz:branches:server:monitoring

- update AppArmor profiles for usrMerge (related to boo#1132350)
  - grep in check_cups
  - ps in check_procs and check_procs.sle15

Note: ps currently still lives in /bin/, but also allowing /usr/bin/ to be prepared can't hurt ;-)

OBS-URL: https://build.opensuse.org/request/show/694064
OBS-URL: https://build.opensuse.org/package/show/server:monitoring/monitoring-plugins?expand=0&rev=61

monitoring-plugins.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Sun Apr 14 15:57:26 UTC 2019 - Christian Boltz <suse-beta@cboltz.de>
+
+- update AppArmor profiles for usrMerge (related to boo#1132350)
+  - grep in check_cups
+  - ps in check_procs and check_procs.sle15
+
 -------------------------------------------------------------------
 Fri Apr 12 14:20:08 CEST 2019 - ro@suse.de
 

usr.lib.nagios.plugins.check_cups

@@ -11,7 +11,7 @@
   network inet stream,
 
   /{usr/,}bin/bash rix,
-  /bin/grep rix,
+  /{usr/,}bin/grep rix,
   /{usr/,}bin/which rix,
   /{usr/,}bin/lpstat rix,
   /{usr/,}bin/basename rix,

usr.lib.nagios.plugins.check_procs

@@ -6,7 +6,7 @@
 
   capability sys_ptrace,
 
-  /bin/ps rix,
+  /{usr/,}bin/ps rix,
   /proc/ r,
   /proc/** r,
   /usr/lib/nagios/plugins/check_procs mr,

usr.lib.nagios.plugins.check_procs.sle15

@@ -7,7 +7,7 @@
   ptrace,
   ptrace (read) peer=unconfined,
 
-  /bin/ps rix,
+  /{usr/,}bin/ps rix,
   /proc/ r,
   /proc/** r,
   /usr/lib/nagios/plugins/check_procs mr,