A bug in Ubuntu[1] was reported regarding mmap denials for pkcs library
files. This patch updates the p11-kit abstraction to have:
/usr/lib{,32,64}/pkcs11/*.so mr,
/usr/lib/@{multiarch}/pkcs11/*.so mr,[1]https:/launchpad.net/bugs/917639 -- Jamie Strandboge | http://www.canonical.com
------------------------------------------------------------ revno: 1929 committer: Jamie Strandboge <[email protected]> branch nick: apparmor-trunk timestamp: Tue 2012-01-17 07:39:49 -0600 message: update p11-kit to allow mmap of libraries in pkcs directories diff: === modified file 'profiles/apparmor.d/abstractions/p11-kit' --- profiles/apparmor.d/abstractions/p11-kit 2012-01-06 17:45:44 +0000 +++ profiles/apparmor.d/abstractions/p11-kit 2012-01-17 13:39:49 +0000 @@ -13,6 +13,9 @@ /etc/pkcs11/modules/ r, /etc/pkcs11/modules/* r, + /usr/lib{,32,64}/pkcs11/*.so mr, + /usr/lib/@{multiarch}/pkcs11/*.so mr, + # p11-kit also supports reading user configuration from ~/.pkcs11 depending # on how /etc/pkcs11/pkcs11.conf is configured. This should generally not be # included in this abstraction.
signature.asc
Description: This is a digitally signed message part
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
