[apparmor] [PATCH profile 1/1] dnsmasq: Adjust pattern for log files to comply SELinux

Petr Vorel pvorel at suse.cz
Wed Nov 7 20:20:16 UTC 2018


Hi,

> -  /var/log/*dnsmasq.log w,
> +  /var/log/dnsmasq.* w,
Actually according to their syntax
/var/log/dnsmasq.*      --      gen_context(system_u:object_r:dnsmasq_var_log_t,s0)
it should be
/var/log/dnsmasq* w,

Not sure, whether we want to be that open, maybe this (our syntax) would be the best:
/var/log/dnsmasq*.log w,

If you plan to merge it, can you wait a bit to SELinux response?

Kind regards,
Petr



More information about the AppArmor mailing list