[apparmor] [PATCH profile 1/1] dnsmasq: Adjust pattern for log files to comply SELinux
Petr Vorel
pvorel at suse.cz
Wed Nov 7 20:20:16 UTC 2018
Hi,
> - /var/log/*dnsmasq.log w,
> + /var/log/dnsmasq.* w,
Actually according to their syntax
/var/log/dnsmasq.* -- gen_context(system_u:object_r:dnsmasq_var_log_t,s0)
it should be
/var/log/dnsmasq* w,
Not sure, whether we want to be that open, maybe this (our syntax) would be the best:
/var/log/dnsmasq*.log w,
If you plan to merge it, can you wait a bit to SELinux response?
Kind regards,
Petr
More information about the AppArmor
mailing list