apparmor/profiles/apparmor.d
Christian Boltz 196f344270 Allow both paths in traceroute profile
In 2011 (r1803), the traceroute profile was changed to also match
/usr/bin/traceroute.db:
    /usr/{sbin/traceroute,bin/traceroute.db} {

However, permissions for /usr/bin/traceroute.db were never added.
This patch fixes this.


While on it, also change the /usr/sbin/traceroute permissions from
rmix to the less confusing mrix.


Acked-by: Seth Arnold <seth.arnold@canonical.com> for trunk, 2.10 and 2.9.
2016-09-30 00:07:26 +02:00
..
abstractions gnome abstraction: allow reading file type associations from another place where it can live on Debian. 2016-08-25 12:12:56 +02:00
apache2.d Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables = Background = 2014-02-14 16:24:52 -06:00
bin.ping allow inet6 in ping profile 2016-05-18 21:18:10 +02:00
sbin.klogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
sbin.syslog-ng syslog-ng profile: allow /run/log/journal/ 2015-11-11 16:44:47 +01:00
sbin.syslogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
usr.lib.apache2.mpm-prefork.apache2 profiles: Allow CAP_CHOWN in usr.lib.apache2.mpm-prefork.apache2 2016-03-19 03:10:00 -05:00
usr.lib.dovecot.anvil profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.auth dovecot/auth: allow access to /var/run/dovecot/stats-user 2016-04-07 00:53:06 +02:00
usr.lib.dovecot.config profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda dovecot-lda profile: allow tempfiles and executing sendmail 2016-02-20 01:15:20 +01:00
usr.lib.dovecot.imap Dovecot imap needs to read /run/dovecot/mounts 2015-09-03 18:27:00 +02:00
usr.lib.dovecot.imap-login Add some missing /run/dovecot/* to usr.lib.dovecot.imap{, -login} 2014-12-22 17:41:59 +01:00
usr.lib.dovecot.lmtp usr.lib.dovecot.lmtp: add openssl and ssl_keys abstractions 2015-04-27 21:33:06 +02:00
usr.lib.dovecot.log profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.ssl-params profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.sbin.apache2 Update phpsysinfo instructions in usr.sbin.apache2. Incorporate feedback from 2014-09-08 20:39:34 -05:00
usr.sbin.avahi-daemon profiles/apparmor.d/usr.sbin.avahi-daemon: allow write access to 2015-07-24 15:03:30 -05:00
usr.sbin.dnsmasq profiles: Add attach_disconnected flag to dnsmasq profile 2016-04-12 16:36:43 -05:00
usr.sbin.dovecot update and cleanup usr.sbin.dovecot profile 2014-12-22 17:49:28 +01:00
usr.sbin.identd identd pid file location on Debian/Ubuntu 2014-09-03 14:47:33 -05:00
usr.sbin.mdnsd mdnsd update for fine-grained netlink mediation 2014-09-03 14:49:50 -05:00
usr.sbin.nmbd Update samba profiles for samba 4.x 2013-11-20 01:17:52 +01:00
usr.sbin.nscd nscd profile: allow paranoia mode 2016-03-21 21:30:19 +01:00
usr.sbin.ntpd Allow ntpd to read directory listings of $PATH 2015-09-15 14:24:57 +02:00
usr.sbin.smbd usr.sbin.smbd: new lock dir used by recent versions (4.3.8) 2016-04-13 09:24:46 -04:00
usr.sbin.smbldap-useradd Change /bin/ paths in profiles to also match on /usr/bin/ 2015-10-20 23:12:35 +02:00
usr.sbin.traceroute Allow both paths in traceroute profile 2016-09-30 00:07:26 +02:00
usr.sbin.winbindd winbindd profile: allow dac_override 2016-08-03 21:51:54 +02:00