Simon Déziel has proposed merging lp:~sdeziel/apparmor-profiles/unbound-chown into lp:apparmor-profiles.
Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~sdeziel/apparmor-profiles/unbound-chown/+merge/296005 -- Your team AppArmor Developers is requested to review the proposed merge of lp:~sdeziel/apparmor-profiles/unbound-chown into lp:apparmor-profiles.
=== modified file 'ubuntu/16.04/usr.sbin.unbound' --- ubuntu/16.04/usr.sbin.unbound 2016-04-13 12:47:26 +0000 +++ ubuntu/16.04/usr.sbin.unbound 2016-05-29 19:19:27 +0000 @@ -7,6 +7,9 @@ #include <abstractions/nameservice> #include <abstractions/openssl> + # needlessly chown'ing the PID + deny capability chown, + capability net_bind_service, capability setgid, capability setuid, === modified file 'ubuntu/16.10/usr.sbin.unbound' --- ubuntu/16.10/usr.sbin.unbound 2016-04-22 22:38:30 +0000 +++ ubuntu/16.10/usr.sbin.unbound 2016-05-29 19:19:27 +0000 @@ -7,6 +7,9 @@ #include <abstractions/nameservice> #include <abstractions/openssl> + # needlessly chown'ing the PID + deny capability chown, + capability net_bind_service, capability setgid, capability setuid,
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
