mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

profiles/apparmor.d/tinyproxy: allow capability setgid

Browse source 
tinyproxy drops privileges in some configurations so ensure we allow it.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
This commit is contained in:
Alex Murray 2025-02-06 18:15:18 +10:30
parent f2a6860767
commit 965a678cb7
Failed to generate hash of commit
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
profiles/apparmor.d/tinyproxy
View file

@ -18,6 +18,9 @@ profile tinyproxy /usr/bin/tinyproxy {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
# allow to drop privileges
capability setgid,
# to provide flexibility, when run as root tinyproxy may need to read files # to provide flexibility, when run as root tinyproxy may need to read files
# owned by other users # owned by other users
capability dac_override, capability dac_override,