[apparmor] [PATCH] 04/04 mdnsd update for fine-grained netlink mediation

[Seth Arnold]

On Wed, Sep 03, 2014 at 02:30:43PM -0500, Jamie Strandboge wrote:
> On 09/03/2014 02:14 PM, Jamie Strandboge wrote:
> > 
> > While testing the new unix mediation, I noticed a number of small issues with
> > the policy. Here are fixes.
> > 
> 
> Update mdnsd for fine-grained netlink mediation. A mdnsd binary was not
> available to test but code inspection showed it set up the socket the same as
> avahi, which uses SOCK_DGRAM type instead of SOCK_RAW with netlink.
> 
> Acked-By: Jamie Strandboge <jamie at canonical.com>

Acked-by: Seth Arnold <seth.arnold at canonical.com>

Thanks

> 
> 
> -- 
> Jamie Strandboge                 http://www.ubuntu.com/

> Author: Jamie Strandboge <jamie at canonical.com>
> Description: update mdnsd for fine-grained netlink mediation
> 
> Index: apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.mdnsd
> ===================================================================
> --- apparmor-2.8.96~2541.orig/profiles/apparmor.d/usr.sbin.mdnsd
> +++ apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.mdnsd
> @@ -22,6 +22,8 @@
>    capability sys_chroot,
>    capability sys_resource,
>  
> +  network netlink dgram,
> +
>    /usr/sbin/mdnsd rmix,
>  
>    @{PROC}/net/ r,




> -- 
> AppArmor mailing list
> AppArmor at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140903/f8d3181d/attachment.pgp>