On Wed, Sep 03, 2014 at 02:30:43PM -0500, Jamie Strandboge wrote: > On 09/03/2014 02:14 PM, Jamie Strandboge wrote: > > > > While testing the new unix mediation, I noticed a number of small issues > > with > > the policy. Here are fixes. > > > > Update mdnsd for fine-grained netlink mediation. A mdnsd binary was not > available to test but code inspection showed it set up the socket the same as > avahi, which uses SOCK_DGRAM type instead of SOCK_RAW with netlink. > > Acked-By: Jamie Strandboge <[email protected]>
Acked-by: Seth Arnold <[email protected]> Thanks > > > -- > Jamie Strandboge http://www.ubuntu.com/ > Author: Jamie Strandboge <[email protected]> > Description: update mdnsd for fine-grained netlink mediation > > Index: apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.mdnsd > =================================================================== > --- apparmor-2.8.96~2541.orig/profiles/apparmor.d/usr.sbin.mdnsd > +++ apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.mdnsd > @@ -22,6 +22,8 @@ > capability sys_chroot, > capability sys_resource, > > + network netlink dgram, > + > /usr/sbin/mdnsd rmix, > > @{PROC}/net/ r, > -- > AppArmor mailing list > [email protected] > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/apparmor
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
