On Tue, Jan 17, 2012 at 07:59:30AM -0600, Jamie Strandboge wrote:
> A bug in Ubuntu[1] was reported regarding mmap denials for pkcs library
> files. This patch updates the p11-kit abstraction to have:
> /usr/lib{,32,64}/pkcs11/*.so mr,
> /usr/lib/@{multiarch}/pkcs11/*.so mr,
>
> [1]https:/launchpad.net/bugs/917639Acked-By: Steve Beattie <[email protected]> for both trunk and the 2.7 branch. Thanks! > ------------------------------------------------------------ > revno: 1929 > committer: Jamie Strandboge <[email protected]> > branch nick: apparmor-trunk > timestamp: Tue 2012-01-17 07:39:49 -0600 > message: > update p11-kit to allow mmap of libraries in pkcs directories > diff: > === modified file 'profiles/apparmor.d/abstractions/p11-kit' > --- profiles/apparmor.d/abstractions/p11-kit 2012-01-06 17:45:44 +0000 > +++ profiles/apparmor.d/abstractions/p11-kit 2012-01-17 13:39:49 +0000 > @@ -13,6 +13,9 @@ > /etc/pkcs11/modules/ r, > /etc/pkcs11/modules/* r, > > + /usr/lib{,32,64}/pkcs11/*.so mr, > + /usr/lib/@{multiarch}/pkcs11/*.so mr, > + > # p11-kit also supports reading user configuration from ~/.pkcs11 depending > # on how /etc/pkcs11/pkcs11.conf is configured. This should generally not > be > # included in this abstraction. -- Steve Beattie <[email protected]> http://NxNW.org/~steve/
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
