Browse Source

fix(apparmor): Fix access to openssl configuration

AppArmor denies access to openssl configuration files:
```
type=AVC msg=audit(1548516028.121:3031): apparmor="DENIED"
operation="open" profile="qtox" name="/etc/ssl/openssl.cnf" pid=12416
comm="qtox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
```

Fix deny by including openssl abstraction.
reviewable/pr5577/r2
Vincas Dargis 7 years ago
parent
commit
514cd36826
  1. 1
      security/apparmor/2.12.1/usr.bin.qtox
  2. 1
      security/apparmor/2.13.2/usr.bin.qtox

1
security/apparmor/2.12.1/usr.bin.qtox

@ -15,6 +15,7 @@ profile qtox /usr{,/local}/bin/qtox { @@ -15,6 +15,7 @@ profile qtox /usr{,/local}/bin/qtox {
#include <abstractions/ibus>
#include <abstractions/kde>
#include <abstractions/nameservice>
#include <abstractions/openssl>
#include <abstractions/video>
# Site-specific additions and overrides. See local/README for details.

1
security/apparmor/2.13.2/usr.bin.qtox

@ -18,6 +18,7 @@ profile qtox /usr{,/local}/bin/qtox { @@ -18,6 +18,7 @@ profile qtox /usr{,/local}/bin/qtox {
#include <abstractions/kde>
#include <abstractions/mesa>
#include <abstractions/nameservice>
#include <abstractions/openssl>
#include <abstractions/qt5-compose-cache-write>
#include <abstractions/qt5-settings-write>
#include <abstractions/recent-documents-write>

Loading…
Cancel
Save