On 09/03/2014 02:14 PM, Jamie Strandboge wrote: > > While testing the new unix mediation, I noticed a number of small issues with > the policy. Here are fixes. >
Update mdnsd for fine-grained netlink mediation. A mdnsd binary was not available to test but code inspection showed it set up the socket the same as avahi, which uses SOCK_DGRAM type instead of SOCK_RAW with netlink. Acked-By: Jamie Strandboge <[email protected]> -- Jamie Strandboge http://www.ubuntu.com/
Author: Jamie Strandboge <[email protected]> Description: update mdnsd for fine-grained netlink mediation Index: apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.mdnsd =================================================================== --- apparmor-2.8.96~2541.orig/profiles/apparmor.d/usr.sbin.mdnsd +++ apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.mdnsd @@ -22,6 +22,8 @@ capability sys_chroot, capability sys_resource, + network netlink dgram, + /usr/sbin/mdnsd rmix, @{PROC}/net/ r,
signature.asc
Description: OpenPGP digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
