Re: [apparmor] [patch] syslog-ng - capability dac_read_search

2012-01-06 Thread John Johansen
On 01/06/2012 04:09 PM, Steve Beattie wrote: > On Fri, Jan 06, 2012 at 01:30:07AM +0100, Christian Boltz wrote: >> Peter didn't mention details on the mailinglist. It _seems_ to be caused >> by a new syslog-ng version. Some searching brought up >> https://bugzilla.novell.com/show_bug.cgi?id=73187

Re: [apparmor] [patch] syslog-ng - capability dac_read_search

2012-01-06 Thread Steve Beattie
On Fri, Jan 06, 2012 at 01:30:07AM +0100, Christian Boltz wrote: > Peter didn't mention details on the mailinglist. It _seems_ to be caused > by a new syslog-ng version. Some searching brought up > https://bugzilla.novell.com/show_bug.cgi?id=731876 (search for > "capability" there). > > Some qu

Re: [apparmor] [patch] syslog-ng - capability dac_read_search

2012-01-05 Thread Christian Boltz
Hello, Am Donnerstag, 5. Januar 2012 schrieb Steve Beattie: > On Thu, Jan 05, 2012 at 12:26:45PM +0100, Christian Boltz wrote: > > according to Peter Czanik, the openSUSE syslog-ng maintainer, > > syslog-ng needs capability dac_read_search. > > > > I also nominate this patch for the 2.7 branch. >

Re: [apparmor] [patch] syslog-ng - capability dac_read_search

2012-01-05 Thread Steve Beattie
On Thu, Jan 05, 2012 at 12:26:45PM +0100, Christian Boltz wrote: > according to Peter Czanik, the openSUSE syslog-ng maintainer, syslog-ng > needs capability dac_read_search. > > I also nominate this patch for the 2.7 branch. I think this is okay (we already have dac_override) but is there a ref

[apparmor] [patch] syslog-ng - capability dac_read_search

2012-01-05 Thread Christian Boltz
Hello, according to Peter Czanik, the openSUSE syslog-ng maintainer, syslog-ng needs capability dac_read_search. I also nominate this patch for the 2.7 branch. === modified file 'profiles/apparmor.d/sbin.syslog-ng' --- profiles/apparmor.d/sbin.syslog-ng 2011-09-15 19:21:57 + +++ profiles/a