Subject says it all. Note, this is using /{,var/}run/... since everything else
in the nameservice abstraction still is. I'll send a follow-up patch to remove
all of this once and for all.Signed-Off-By: Jamie Strandboge <ja...@canonical.com> -- Jamie Strandboge | http://www.canonical.com
Author: Jamie Strandboge <ja...@canonical.com>
Description: allow access to stub resolver configuration
Index: apparmor-2.11.0/profiles/apparmor.d/abstractions/nameservice
===================================================================
--- apparmor-2.11.0.orig/profiles/apparmor.d/abstractions/nameservice
+++ apparmor-2.11.0/profiles/apparmor.d/abstractions/nameservice
@@ -37,6 +37,7 @@
# a symlink to /{,var/}run/(whatever program is managing it)/resolv.conf.
/{,var/}run/{resolvconf,NetworkManager,systemd/resolve,connman}/resolv.conf r,
/etc/resolvconf/run/resolv.conf r,
+ /{,var/}run/systemd/resolve/stub-resolv.conf r,
/etc/samba/lmhosts r,
/etc/services r,
signature.asc
Description: This is a digitally signed message part
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
