Merge ~michal-maloszewski99/ubuntu/+source/sssd:sssd-jammy-missing-lines-in-apparmor into ubuntu/+source/sssd:ubuntu/jammy-devel

[Michał Małoszewski]

PPA: https://launchpad.net/~michal-maloszewski99/+archive/ubuntu/ppa-1999190-sssd/+packages

[Michał Małoszewski (michal-maloszewski99)]

Results: (from http://autopkgtest.ubuntu.com/results/autopkgtest-jammy-michal-maloszewski99-ppa-1999190-sssd/?format=plain)
  sssd @ amd64:
    http://autopkgtest.ubuntu.com/results/autopkgtest-jammy-michal-maloszewski99-ppa-1999190-sssd/jammy/amd64/s/sssd/20231006_191528_6197a@/log.gz
    06.10.23 19:15:28 ✅ Triggers: sssd/2.6.3-1ubuntu3.3~ppa1
  sssd @ arm64:
    http://autopkgtest.ubuntu.com/results/autopkgtest-jammy-michal-maloszewski99-ppa-1999190-sssd/jammy/arm64/s/sssd/20231006_192235_94562@/log.gz
    06.10.23 19:22:35 ✅ Triggers: sssd/2.6.3-1ubuntu3.3~ppa1
  sssd @ armhf:
    http://autopkgtest.ubuntu.com/results/autopkgtest-jammy-michal-maloszewski99-ppa-1999190-sssd/jammy/armhf/s/sssd/20231006_192345_7926f@/log.gz
    06.10.23 19:23:45 ✅ Triggers: sssd/2.6.3-1ubuntu3.3~ppa1
  sssd @ ppc64el:
    http://autopkgtest.ubuntu.com/results/autopkgtest-jammy-michal-maloszewski99-ppa-1999190-sssd/jammy/ppc64el/s/sssd/20231006_191817_0c075@/log.gz
    06.10.23 19:18:17 ✅ Triggers: sssd/2.6.3-1ubuntu3.3~ppa1
  sssd @ s390x:
    http://autopkgtest.ubuntu.com/results/autopkgtest-jammy-michal-maloszewski99-ppa-1999190-sssd/jammy/s390x/s/sssd/20231006_191639_91320@/log.gz
    06.10.23 19:16:39 ✅ Triggers: sssd/2.6.3-1ubuntu3.3~ppa1
Running: (none)
Waiting: (none)

[Michał Małoszewski (michal-maloszewski99)]

Please review.

[Lucas Kanashiro (lucaskanashiro)]

Sergio's thoughts about this on MM: "this went into Mantic, but that's because it hadn't been released yet. I'm not sure if it's worth going through an SRU only for such a minor change; IMHO, this should be merged into a bigger SRU for sssd (when that eventually happens)".

Due to that, I am flagging this as Needs Information until we discuss this internally in the Server team.

review: Needs Information

Unmerged commits

7de2b51... by Michał Małoszewski on 2023-10-06

changelog

6cad1ff... by Michał Małoszewski on 2023-10-04

Missing lines in apparmor config for sssd

* d/apparmor-profile: Add some entries to apparmor-profile file
  to get rid of the extraneous ALLOWED messages visible in the
  /var/log/syslog. (LP: #1999190)

diff --git a/debian/apparmor-profile b/debian/apparmor-profile
index fadfa6c..7491662 100644
--- a/debian/apparmor-profile
+++ b/debian/apparmor-profile
@@ -4,6 +4,7 @@
   #include <abstractions/base>
   #include <abstractions/kerberosclient>
   #include <abstractions/nameservice>
+  #include <abstractions/openssl>
   #include <abstractions/user-tmp>
 
   capability chown,
@@ -16,6 +17,7 @@
   capability sys_resource,
 
   @{PROC} r,
+  @{PROC}/[0-9]*/cmdline r,
   @{PROC}/[0-9]*/net/psched r,
   @{PROC}/[0-9]*/status r,
 
@@ -42,7 +44,7 @@
   /var/lib/sss/* rw,
   /var/lib/sss/db/* rwk,
   /var/lib/sss/gpo_cache/* rw,
-  /var/lib/sss/mc/* rw,
+  /var/lib/sss/mc/* rwk,
   /var/lib/sss/pipes/* rw,
   /var/lib/sss/pipes/private/* rw,
   /var/lib/sss/pubconf/* rw,
@@ -53,6 +55,7 @@
 
   /{,var/}run/sssd.pid rw,
   /{,var/}run/systemd/notify w,
+  /{,var/}run/systemd/users/* r,
 
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.sssd>
diff --git a/debian/changelog b/debian/changelog
index d603b87..9a1976f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+sssd (2.6.3-1ubuntu3.3) jammy; urgency=medium
+
+  * d/apparmor-profile: Add some entries to apparmor-profile file
+    to get rid of the extraneous ALLOWED messages visible in the
+    /var/log/syslog. (LP: #1999190)
+
+ -- Michal Maloszewski <[e-mail]>  Fri, 06 Oct 2023 17:07:25 +0200
+
 sssd (2.6.3-1ubuntu3.2) jammy; urgency=medium
 
   * d/p/initialize-uid-gid-main-functions.patch: Initialize UID/GID