Skip to content
Snippets Groups Projects
Commit 536959d7 authored by Christian Boltz's avatar Christian Boltz
Browse files

Merge nscd: add permission to allow supporting unscd

`unscd` is a drop-in replacement for `nscd` that uses the same binary location (`/usr/sbin/nscd`) and config file (`/etc/nscd.conf`). The `usr.sbin.nscd` profile only needs one additional permission to support it.

```
May 9 18:07:42 darkstar kernel: [ 2706.138823] audit: type=1400
audit(1683670062.580:839): apparmor="DENIED" operation="sendmsg"
profile="nscd" name="/run/systemd/notify" pid=4343 comm="nscd"
requested_mask="w" denied_mask="w" fsuid=125 ouid=0
```

MR: !1031


Approved-by: default avatarChristian Boltz <apparmor@cboltz.de>
Merged-by: default avatarChristian Boltz <apparmor@cboltz.de>


(cherry picked from commit dec3815f)

bd0d401b nscd: add permission to allow supporting unscd
parent 9cd55ff4
No related branches found
No related tags found
No related merge requests found
Pipeline #862860626 passed
......@@ -43,6 +43,9 @@ profile nscd /usr/{bin,sbin}/nscd {
/{etc,run,run/host,/usr/lib}/userdb/ r,
/{etc,run,run/host,/usr/lib}/userdb/*.{user,user-privileged,group,group-privileged} r,
# needed by unscd
@{run}/systemd/notify w,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.nscd>
}
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment