AppArmor Profiles

Merge lp:~sdeziel/apparmor-profiles/unbound-chown into lp:apparmor-profiles

  1. unbound-chown
  2. Merge into master
Proposed by Simon Déziel
Status: Merged
Merged at revision: 169
Proposed branch: lp:~sdeziel/apparmor-profiles/unbound-chown
Merge into: lp:apparmor-profiles
Diff against target: 27 lines (+6/-0)
2 files modified
ubuntu/16.04/usr.sbin.unbound (+3/-0)
ubuntu/16.10/usr.sbin.unbound (+3/-0)
To merge this branch: bzr merge lp:~sdeziel/apparmor-profiles/unbound-chown
Reviewer Review Type Date Requested Status
Christian Boltz Approve
Review via email: mp+296005@code.launchpad.net
To post a comment you must log in.
Revision history for this message
Christian Boltz (cboltz) wrote :

Thanks for the patch!

Merged into r169.

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1=== modified file 'ubuntu/16.04/usr.sbin.unbound'
2--- ubuntu/16.04/usr.sbin.unbound 2016-04-13 12:47:26 +0000
3+++ ubuntu/16.04/usr.sbin.unbound 2016-05-29 19:19:27 +0000
4@@ -7,6 +7,9 @@
5 #include <abstractions/nameservice>
6 #include <abstractions/openssl>
7
8+ # needlessly chown'ing the PID
9+ deny capability chown,
10+
11 capability net_bind_service,
12 capability setgid,
13 capability setuid,
14
15=== modified file 'ubuntu/16.10/usr.sbin.unbound'
16--- ubuntu/16.10/usr.sbin.unbound 2016-04-22 22:38:30 +0000
17+++ ubuntu/16.10/usr.sbin.unbound 2016-05-29 19:19:27 +0000
18@@ -7,6 +7,9 @@
19 #include <abstractions/nameservice>
20 #include <abstractions/openssl>
21
22+ # needlessly chown'ing the PID
23+ deny capability chown,
24+
25 capability net_bind_service,
26 capability setgid,
27 capability setuid,

Subscribers

People subscribed via source and target branches

to status/vote changes: