On Mon, 08 Oct 2018, Petr Vorel wrote:

> --log-facility option needs to have permission to open files.
> Use '*' to allow using more files (for using more dnsmasq instances).
> 
> Signed-off-by: Petr Vorel <[email protected]>
> ---
>  profiles/apparmor.d/usr.sbin.dnsmasq | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/profiles/apparmor.d/usr.sbin.dnsmasq 
> b/profiles/apparmor.d/usr.sbin.dnsmasq
> index 2b4b1bfc..f2e6847d 100644
> --- a/profiles/apparmor.d/usr.sbin.dnsmasq
> +++ b/profiles/apparmor.d/usr.sbin.dnsmasq
> @@ -45,6 +45,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq 
> flags=(attach_disconnected) {
>  
>    /usr/{bin,sbin}/dnsmasq mr,
>  
> +  /var/log/*dnsmasq.log w,
> +

+1

-- 
Jamie Strandboge             | http://www.canonical.com

Attachment: signature.asc
Description: PGP signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to