mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-05 17:01:00 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add m permissions to mlmmj profiles

Browse source 
Newer kernels need m permissions for the binary the profile covers,
so add it before someone hits this problem in the wild ;-)

Also add a note that the mlmmj-recieve profile is probably superfluous
because upstream renamed the misspelled binary.


Acked-by: Seth Arnold <seth.arnold@canonical.com> for trunk, 2.10 and 2.9
This commit is contained in:
Christian Boltz 2016-11-09 19:45:12 +01:00
parent 29d287f94e
commit eacb977ebd
8 changed files with 13 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-bounce
View file

@ -15,7 +15,7 @@
/usr/bin/mlmmj-bounce {
#include <abstractions/base>
/usr/bin/mlmmj-bounce r,
/usr/bin/mlmmj-bounce mr,
/usr/bin/mlmmj-send Px,
/usr/bin/mlmmj-maintd Px,
/var/spool/mlmmj/*/subscribers.d/ r,

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-maintd
View file

@ -17,7 +17,7 @@
capability setuid,
/usr/bin/mlmmj-maintd r,
/usr/bin/mlmmj-maintd mr,
/usr/bin/mlmmj-send Px,
/usr/bin/mlmmj-bounce Px,
/usr/bin/mlmmj-unsub Px,

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-process
View file

@ -15,7 +15,7 @@
/usr/bin/mlmmj-process {
#include <abstractions/base>
/usr/bin/mlmmj-process r,
/usr/bin/mlmmj-process mr,
/usr/bin/mlmmj-send Px,
/usr/bin/mlmmj-sub Px,
/usr/bin/mlmmj-unsub Px,

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-receive
View file

@ -16,7 +16,7 @@
#include <abstractions/base>
/usr/bin/mlmmj-process Px,
/usr/bin/mlmmj-receive r,
/usr/bin/mlmmj-receive mr,
/var/spool/mlmmj/*/incoming/ rw,
/var/spool/mlmmj/*/incoming/* rw,
}

7
profiles/apparmor/profiles/extras/usr.bin.mlmmj-recieve
View file

@ -9,12 +9,17 @@
# ------------------------------------------------------------------
# vim:syntax=apparmor
# mlmmj upstream renamed the (misspelled) mlmmj-recieve to mlmmj-receive,
# so this profile is probably superfluous
#include <tunables/global>
/usr/bin/mlmmj-recieve {
#include <abstractions/base>
/usr/bin/mlmmj-process Px,
/usr/bin/mlmmj-recieve r,
/usr/bin/mlmmj-recieve mr,
/var/spool/mlmmj/*/incoming/* w,
}

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-send
View file

@ -16,7 +16,7 @@
#include <abstractions/base>
#include <abstractions/nameservice>
/usr/bin/mlmmj-send r,
/usr/bin/mlmmj-send mr,
/var/spool/mlmmj/*/archive/* w,
/var/spool/mlmmj/*/control/* r,
/var/spool/mlmmj/*/index rwk,

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-sub
View file

@ -18,7 +18,7 @@
capability setuid,
/usr/bin/mlmmj-send Px,
/usr/bin/mlmmj-sub r,
/usr/bin/mlmmj-sub mr,
/var/spool/mlmmj/*/control/ r,
/var/spool/mlmmj/*/control/* r,
/var/spool/mlmmj/*/queue/ rw,

2
profiles/apparmor/profiles/extras/usr.bin.mlmmj-unsub
View file

@ -15,7 +15,7 @@
/usr/bin/mlmmj-unsub {
#include <abstractions/base>
/usr/bin/mlmmj-unsub r,
/usr/bin/mlmmj-unsub mr,
/usr/bin/mlmmj-send Px,
/var/spool/mlmmj/*/control/ r,
/var/spool/mlmmj/*/control/* r,