mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Allow dnsmasq read access to IPv6 config

Browse source 
The IPv6 Neighbor Discovery protocol (RFC 2461) suggests
implementations provide MTU in Router Advertisement (RA)
messages.  From section 4.2

MTU    SHOULD be sent on links that have a variable MTU
       (as specified in the document that describes how to
       run IP over the particular link type).  MAY be sent
       on other links.

dnsmasq supports this option and should have read access
to an interface's MTU.

Patch by James Fehlig <jfehlig@suse.com>


slightly modified (../conf/**/mtu -> ../conf/*/mtu)


Acked-by: Seth Arnold <seth.arnold@canonical.com>
This commit is contained in:
Christian Boltz 2014-09-06 23:09:18 +02:00
parent c72c406357
commit 6f6bce01a1
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
profiles/apparmor.d/usr.sbin.dnsmasq
View file

@ -40,6 +40,10 @@
/var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage /var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage
# access to iface mtu needed for Router Advertisement messages in IPv6
# Neighbor Discovery protocol (RFC 2461)
@{PROC}/sys/net/ipv6/conf/**/mtu r,
# for the read-only TFTP server # for the read-only TFTP server
@{TFTP_DIR}/ r, @{TFTP_DIR}/ r,
@{TFTP_DIR}/** r, @{TFTP_DIR}/** r,