On Mon, Jan 09, 2012 at 02:24:55PM +0100, Christian Boltz wrote: > Hello, > > I compared the profiles in trunk and the 2.7 branch. > There are not too many differences left: > - the (intended) small difference that 2.7 allows /.htaccess for > httpd-prefork > - a patch in the dnsmasq profile (see below), which should be backported > to 2.7 IMHO > > Feedback welcome ;-) > > > diff -u -p -r 2.7-branch/profiles/apparmor.d/usr.sbin.dnsmasq > HEAD-CLEAN/profiles/apparmor.d/usr.sbin.dnsmasq > > --- 2.7-branch/profiles/apparmor.d/usr.sbin.dnsmasq 2011-12-21 > 19:03:34.000000000 +0100 > +++ HEAD-CLEAN/profiles/apparmor.d/usr.sbin.dnsmasq 2011-12-29 > 01:57:46.000000000 +0100 > @@ -9,6 +9,8 @@ > # > # ------------------------------------------------------------------ > > +@{TFTP_DIR}=/var/tftp > + > #include <tunables/global> > /usr/sbin/dnsmasq { > #include <abstractions/base> > @@ -36,6 +38,10 @@ > > /var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage > > + # for the read-only TFTP server > + @{TFTP_DIR}/ r, > + @{TFTP_DIR}/** r, > + > # libvirt lease and hosts files for dnsmasq > /var/lib/libvirt/dnsmasq/ r, > /var/lib/libvirt/dnsmasq/*.leases rw,
Acked-By: Steve Beattie <sbeat...@ubuntu.com> for 2.7 Thanks. > - oh, and my smbd / smbldap-useradd patch is still pending... Sorry, I'll review it in a second. -- Steve Beattie <sbeat...@ubuntu.com> http://NxNW.org/~steve/
signature.asc
Description: Digital signature
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor