Simon Déziel has proposed merging lp:~sdeziel/apparmor-profiles/unbound-refresh into lp:apparmor-profiles.
Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~sdeziel/apparmor-profiles/unbound-refresh/+merge/291752 Unbound 1.5.8 landed in Ubuntu not long ago (LP: #1556308). This release no longer attempts to use the chown/dac_override caps so let's drop those denials. -- Your team AppArmor Developers is requested to review the proposed merge of lp:~sdeziel/apparmor-profiles/unbound-refresh into lp:apparmor-profiles.
=== modified file 'ubuntu/16.04/usr.sbin.unbound' --- ubuntu/16.04/usr.sbin.unbound 2016-02-01 21:06:19 +0000 +++ ubuntu/16.04/usr.sbin.unbound 2016-04-13 13:12:37 +0000 @@ -7,11 +7,6 @@ #include <abstractions/nameservice> #include <abstractions/openssl> - # needlessly chown'ing the PID, for details see: - # https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=734 - deny capability chown, - deny capability dac_override, - capability net_bind_service, capability setgid, capability setuid,
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
