Edit /etc/apparmor.d/usr.sbin.slapd is unnecessary

Bug #745120 reported by Kazuhiro NISHIYAMA
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Server Guide
Fix Released
Undecided
Peter Matulis
Trunk
Fix Released
Undecided
Peter Matulis

Bug Description

Binary package hint: ubuntu-docs

In https://help.ubuntu.com/10.04/serverguide/C/openldap-server.html
> The AppArmor profile for slapd will need to be adjusted for the accesslog database location. Edit /etc/apparmor.d/usr.sbin.slapd adding:
>
> /var/lib/ldap/accesslog/ r,
> /var/lib/ldap/accesslog/** rwk,

but /etc/apparmor.d/usr.sbin.slapd has already following lines:

> # the databases and logs
> /var/lib/ldap/ r,
> /var/lib/ldap/** rwk,

Then I think editing it is unnecessary.

Tags: serverguide
Connor Imes (ckimes)
tags: added: serverguide
Revision history for this message
Connor Imes (ckimes) wrote :

The Ubuntu Documentation team has moved the serverguide out of the ubuntu-docs source, it is now under the serverguide project. Moving this bug accordingly.

I'll keep this open for ubuntu-docs since it should be easy to do a SRU for this by removing the offending lines.

Revision history for this message
John Kim (kotux) wrote :

We'll have to leave this to serverguide.

Changed in ubuntu-docs (Ubuntu):
status: New → Invalid
Revision history for this message
John Kim (kotux) wrote :

13.04's: https://help.ubuntu.com/13.04/serverguide/openldap-server.html
Also a wiki: https://help.ubuntu.com/community/OpenLDAPServer

This could use confirmation.

I don't see openldap-server.page in saucy serverguide. Has it been dropped?

no longer affects: ubuntu-docs (Ubuntu)
Revision history for this message
Peter Matulis (petermatulis) wrote :

10.04 will not be receiving any more updates but 12.04 and 14.04 are valid targets. For those releases I have not conducted tests but the man pages [1,2] are clear enough to confirm this bug:

===
   Globbing
       File resources may be specified with a globbing syntax similar to that
       used by popular shells, such as csh(1), bash(1), zsh(1).

       * can substitute for any number of characters, excepting '/'

       ** can substitute for any number of characters, including '/'

      .
      .
      .
      .

       /tmp/**
           Files and directories anywhere underneath /tmp.
===

[1]: http://manpages.ubuntu.com/manpages/precise/en/man5/apparmor.d.5.html
[2]: http://manpages.ubuntu.com/manpages/trusty/en/man5/apparmor.d.5.html

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.