On Fri, Aug 28, 2015 at 05:12:23PM -0000, intrigeri wrote: > intrigeri has proposed merging > lp:~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location into > lp:apparmor-profiles. > > Requested reviews: > AppArmor Developers (apparmor-dev) > > For more details, see: > https://code.launchpad.net/~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location/+merge/269536 > -- > Your team AppArmor Developers is requested to review the proposed merge of > lp:~intrigeri/apparmor-profiles/pulseaudio-vs-new-orcexec-location into > lp:apparmor-profiles.
> === modified file 'ubuntu/15.04/usr.bin.pulseaudio'
> --- ubuntu/15.04/usr.bin.pulseaudio 2014-10-24 19:02:18 +0000
> +++ ubuntu/15.04/usr.bin.pulseaudio 2015-08-28 17:12:00 +0000
> @@ -79,7 +79,11 @@
> owner /tmp/pulse-*/pid rwk,
> owner /tmp/pulse-*/native rwk,
> owner /tmp/pulse-*/autospawn.lock rwk,
> - owner /tmp/orcexec.* rmw,
> +
> + owner /tmp/orcexec.* mrw,
> + owner /{,var/}run/user/[0-9]*/orcexec.* mrw,
> + # needed if /tmp is mounted noexec:
> + owner @{HOME}/orcexec.* mr,
I went ahead and merged this, but I'm mildly confused that this last
line doesn't require write access.
--
Steve Beattie
<[email protected]>
http://NxNW.org/~steve/
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
