apparmor/profiles/apparmor.d/abstractions/authentication
Steve Beattie 83007d7600 Author: Jamie Strandboge <jamie@canonical.com>,
Steve Langasek <steve.langasek@linaro.org>,
 Steve Beattie <sbeattie@ubuntu.com>
Description: add multiarch support to abstractions
Bug-Ubuntu: https://bugs.launchpad.net/bugs/736870

This patch add multiarch support for common shared library locations, as
well as a tunables file and directory to ease adding addiotional
multiarch paths.

Bug: https://launchpad.net/bugs/736870
2011-03-23 12:24:11 -07:00

49 lines
1.4 KiB
Text

# ------------------------------------------------------------------
#
# Copyright (C) 2002-2009 Novell/SUSE
# Copyright (C) 2009-2011 Canonical Ltd
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# Some services need to perform authentication of users
# Such authentication almost certainly needs access to the local users
# databases containing passwords, PAM configuration files, PAM libraries
/etc/nologin r,
/etc/pam.d/* r,
/etc/securetty r,
/etc/security/* r,
/etc/shadow r,
/etc/gshadow r,
/etc/pwdb.conf r,
/lib{,32,64}/security/pam_filter/* mr,
/lib{,32,64}/security/pam_*.so mr,
/lib{,32,64}/security/ r,
/lib/@{multiarch}/security/pam_filter/* mr,
/lib/@{multiarch}/security/pam_*.so mr,
/lib/@{multiarch}/security/ r,
# kerberos
#include <abstractions/kerberosclient>
# SuSE's pwdutils are different:
/etc/default/passwd r,
/etc/login.defs r,
# nis
#include <abstractions/nis>
# winbind
#include <abstractions/winbind>
# likewise
#include <abstractions/likewise>
# smbpass
#include <abstractions/smbpass>