--log-facility option needs to have permission to open files.
Use '*' to allow using more files (for using more dnsmasq instances).
Signed-off-by: Petr Vorel <pvo...@suse.cz>
---
profiles/apparmor.d/usr.sbin.dnsmasq | 2 ++
1 file changed, 2 insertions(+)
diff --git a/profiles/apparmor.d/usr.sbin.dnsmasq
b/profiles/apparmor.d/usr.sbin.dnsmasq
index 2b4b1bfc..f2e6847d 100644
--- a/profiles/apparmor.d/usr.sbin.dnsmasq
+++ b/profiles/apparmor.d/usr.sbin.dnsmasq
@@ -45,6 +45,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq
flags=(attach_disconnected) {
/usr/{bin,sbin}/dnsmasq mr,
+ /var/log/*dnsmasq.log w,
+
/usr/share/dnsmasq/ r,
/usr/share/dnsmasq/* r,
--
2.19.0
--
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
