From 514cd368264fdacdf36013ffb496910475506422 Mon Sep 17 00:00:00 2001 From: Vincas Dargis Date: Sat, 26 Jan 2019 17:23:20 +0200 Subject: [PATCH] fix(apparmor): Fix access to openssl configuration AppArmor denies access to openssl configuration files: ``` type=AVC msg=audit(1548516028.121:3031): apparmor="DENIED" operation="open" profile="qtox" name="/etc/ssl/openssl.cnf" pid=12416 comm="qtox" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0 ``` Fix deny by including openssl abstraction. --- security/apparmor/2.12.1/usr.bin.qtox | 1 + security/apparmor/2.13.2/usr.bin.qtox | 1 + 2 files changed, 2 insertions(+) diff --git a/security/apparmor/2.12.1/usr.bin.qtox b/security/apparmor/2.12.1/usr.bin.qtox index 40d909356..0ea050fd3 100644 --- a/security/apparmor/2.12.1/usr.bin.qtox +++ b/security/apparmor/2.12.1/usr.bin.qtox @@ -15,6 +15,7 @@ profile qtox /usr{,/local}/bin/qtox { #include #include #include + #include #include # Site-specific additions and overrides. See local/README for details. diff --git a/security/apparmor/2.13.2/usr.bin.qtox b/security/apparmor/2.13.2/usr.bin.qtox index 8f1a0a55e..27d344ca5 100644 --- a/security/apparmor/2.13.2/usr.bin.qtox +++ b/security/apparmor/2.13.2/usr.bin.qtox @@ -18,6 +18,7 @@ profile qtox /usr{,/local}/bin/qtox { #include #include #include + #include #include #include #include