apparmor/profiles/apparmor.d
Christian Boltz 536959d714 Merge nscd: add permission to allow supporting unscd
`unscd` is a drop-in replacement for `nscd` that uses the same binary location (`/usr/sbin/nscd`) and config file (`/etc/nscd.conf`). The `usr.sbin.nscd` profile only needs one additional permission to support it.

```
May 9 18:07:42 darkstar kernel: [ 2706.138823] audit: type=1400
audit(1683670062.580:839): apparmor="DENIED" operation="sendmsg"
profile="nscd" name="/run/systemd/notify" pid=4343 comm="nscd"
requested_mask="w" denied_mask="w" fsuid=125 ouid=0
```

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1031
Approved-by: Christian Boltz <apparmor@cboltz.de>
Merged-by: Christian Boltz <apparmor@cboltz.de>


(cherry picked from commit dec3815f07)

bd0d401b nscd: add permission to allow supporting unscd
2023-05-10 10:55:00 +00:00
..
abstractions Merge abstractions/freedesktop.org: allow custom cursors 2023-04-25 19:44:53 +00:00
apache2.d Use @{sys} tunable in profiles and abstractions 2018-11-11 10:18:31 +02:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables profiles: add trailing slash to the run variable definition 2020-05-12 12:30:11 -07:00
bin.ping profiles: support void-specific binary names for openntpd, traceroute, and ping 2018-09-19 00:08:03 -07:00
lsb_release Merge lsb_release: allow cat and cut 2022-11-27 13:00:50 +00:00
nvidia_modprobe Merge nvidia_modprobe: update for driver families and /sys path 2023-02-14 18:40:29 +00:00
sbin.klogd profiles: support distributions which merge sbin into bin 2018-09-19 00:08:03 -07:00
sbin.syslog-ng Merge syslog-ng: allow reading *.journal in flatter directory structure 2022-10-28 06:02:47 -07:00
sbin.syslogd Merge syslogd: allow reading /dev/kmsg 2023-03-31 20:11:13 -07:00
usr.lib.apache2.mpm-prefork.apache2 profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2 2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil Merge branch 'dovecot-fixes-no-doveadm' into 'master' 2019-02-17 21:04:38 +00:00
usr.lib.dovecot.auth Merge branch 'dovecot-fixes-no-doveadm' into 'master' 2019-02-17 21:04:38 +00:00
usr.lib.dovecot.config dovecot/config: allow dac_read_search and reading ssl-parameters.dat 2018-04-14 22:53:40 +02:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict allow reading my.cnf in dovecot-dict profile 2020-06-13 01:56:09 -07:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda Merge branch 'patch-1' into 'master' 2020-08-30 18:57:22 +00:00
usr.lib.dovecot.imap Allow /proc/*/attr/current in dovecot imap and lmtp 2020-06-13 01:55:28 -07:00
usr.lib.dovecot.imap-login Allow /var/run/dovecot/login-master-notify* in dovecot imap-login profiles 2017-09-28 17:47:20 +02:00
usr.lib.dovecot.lmtp Allow /proc/*/attr/current in dovecot imap and lmtp 2020-06-13 01:55:28 -07:00
usr.lib.dovecot.log Update dovecot profiles 2016-12-27 17:46:07 +01:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login backport dovecot profile additions 2019-06-13 22:26:18 +02:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login backport dovecot profile additions 2019-06-13 22:26:18 +02:00
usr.lib.dovecot.script-login dovecot: backport usr.lib.dovecot.script-login to 2.13 2020-10-27 21:14:37 +02:00
usr.lib.dovecot.ssl-params add new location for ssl-params file 2018-10-09 16:54:33 -07:00
usr.lib.dovecot.stats Merge allow Prometheus metrics end-point in dovecot/stats 2021-07-21 12:30:15 -07:00
usr.sbin.apache2 Merge branch 'cboltz-profile-names' into 'master' 2018-10-21 10:35:13 +00:00
usr.sbin.avahi-daemon Merge Add missing /proc permissions to avahi-daemon profile 2021-10-30 02:18:48 -07:00
usr.sbin.dnsmasq Merge dnsmasq: Add missing r permissions for libvirt_leaseshelper 2022-08-22 21:52:43 +00:00
usr.sbin.dovecot Merge Allow dovecot to use all signals 2022-03-25 20:53:20 +00:00
usr.sbin.identd identd: Add network netlink dgram 2019-03-29 01:06:41 -07:00
usr.sbin.mdnsd Merge branch 'cboltz-profile-names' into 'master' 2018-10-21 10:35:13 +00:00
usr.sbin.nmbd Merge branch 'cboltz-profile-names' into 'master' 2018-10-21 10:35:13 +00:00
usr.sbin.nscd Merge nscd: add permission to allow supporting unscd 2023-05-10 10:55:00 +00:00
usr.sbin.ntpd Merge branch 'cboltz-profile-names' into 'master' 2018-10-21 10:35:13 +00:00
usr.sbin.smbd Merge smbd: allow reading /var/lib/nscd/netgroup 2022-11-29 12:57:15 -08:00
usr.sbin.smbldap-useradd Merge branch 'cboltz-profile-names' into 'master' 2018-10-21 10:35:13 +00:00
usr.sbin.traceroute profiles: support void-specific binary names for openntpd, traceroute, and ping 2018-09-19 00:08:03 -07:00
usr.sbin.winbindd Merge branch 'master' into 'master' 2020-03-23 20:14:39 +00:00