On Fri, Jul 24, 2015 at 12:41:30PM -0500, Jamie Strandboge wrote: > profiles/apparmor.d/usr.sbin.dnsmasq: allow /bin/dash in addition to /bin/bash > > Signed-off-by: Jamie Strandboge <[email protected]>
It might also make sense to pre-emptively add /bin/sh, too; probably some distribution uses a /bin/sh that's not a symlink to something else. Acked-by: Seth Arnold <[email protected]> Acked for both 2.9 and trunk. Thanks > ------------------------------------------------------------ > revno: 3211 > committer: Jamie Strandboge <[email protected]> > branch nick: apparmor.wily-profile-updates > timestamp: Fri 2015-07-24 12:32:21 -0500 > message: > profiles/apparmor.d/usr.sbin.dnsmasq: allow /bin/dash in addition to > /bin/bash > > Signed-off-by: Jamie Strandboge <[email protected]> > diff: > === modified file 'profiles/apparmor.d/usr.sbin.dnsmasq' > --- profiles/apparmor.d/usr.sbin.dnsmasq 2015-03-30 03:49:09 +0000 > +++ profiles/apparmor.d/usr.sbin.dnsmasq 2015-07-24 17:32:21 +0000 > @@ -45,7 +45,7 @@ > > /var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage > > - /bin/bash ix, # Required to execute --dhcp-script argument > + /bin/{b,d}ash ix, # Required to execute --dhcp-script argument > > # access to iface mtu needed for Router Advertisement messages in IPv6 > # Neighbor Discovery protocol (RFC 2461)
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
