From 2c00e6de9b7fec8569a9117693b2e34c7931a323 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Fri, 16 Oct 2015 21:50:21 +0200 Subject: [PATCH] dnsmasq profile update: allow /dev/tty This patch is based on a SLE12 patch to allow executing the --dhcp-script. We already have most parts of that patch since r2841, except /dev/tty rw which is needed for the shell's stdout and stderr. References: https://bugzilla.opensuse.org/show_bug.cgi?id=940749 (non-public) Acked by Seth Arnold on IRC (with "owner" added) --- profiles/apparmor.d/usr.sbin.dnsmasq | 2 ++ 1 file changed, 2 insertions(+) diff --git a/profiles/apparmor.d/usr.sbin.dnsmasq b/profiles/apparmor.d/usr.sbin.dnsmasq index f4c0c072c..24a7fa67c 100644 --- a/profiles/apparmor.d/usr.sbin.dnsmasq +++ b/profiles/apparmor.d/usr.sbin.dnsmasq @@ -29,6 +29,8 @@ signal (receive) peer=/usr/sbin/libvirtd, ptrace (readby) peer=/usr/sbin/libvirtd, + owner /dev/tty rw, + /etc/dnsmasq.conf r, /etc/dnsmasq.d/ r, /etc/dnsmasq.d/* r,