Hi, > - /var/log/*dnsmasq.log w, > + /var/log/dnsmasq.* w, Actually according to their syntax /var/log/dnsmasq.* -- gen_context(system_u:object_r:dnsmasq_var_log_t,s0) it should be /var/log/dnsmasq* w,
Not sure, whether we want to be that open, maybe this (our syntax) would be the best: /var/log/dnsmasq*.log w, If you plan to merge it, can you wait a bit to SELinux response? Kind regards, Petr -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor