[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apparmor-dev
Subject:    Re: [apparmor] [PATCH profile 1/1] dnsmasq: Adjust pattern for log files to comply SELinux
From:       Petr Vorel <pvorel () suse ! cz>
Date:       2018-11-07 20:20:16
Message-ID: 20181107202016.GB11754 () dell5510
[Download RAW message or body]

Hi,

> -  /var/log/*dnsmasq.log w,
> +  /var/log/dnsmasq.* w,
Actually according to their syntax
/var/log/dnsmasq.*      --      gen_context(system_u:object_r:dnsmasq_var_log_t,s0)
it should be
/var/log/dnsmasq* w,

Not sure, whether we want to be that open, maybe this (our syntax) would be the best:
/var/log/dnsmasq*.log w,

If you plan to merge it, can you wait a bit to SELinux response?

Kind regards,
Petr

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor

[prev in list] [next in list] [prev in thread] [next in thread]