packages/utils/apparmor/patches/060-openwrt-dnsmasq-profile.patch

--- a/profiles/apparmor.d/usr.sbin.dnsmasq
+++ b/profiles/apparmor.d/usr.sbin.dnsmasq
@@ -18,6 +18,7 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq
   include <abstractions/base>
   include <abstractions/dbus>
   include <abstractions/nameservice>
+  include <abstractions/user-tmp>
 
   capability chown,
   capability net_bind_service,
@@ -38,6 +39,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq
 
   @{PROC}/@{pid}/fd/ r,
 
+  /tmp/** r,
+
   /etc/dnsmasq.conf r,
   /etc/dnsmasq.d/ r,
   /etc/dnsmasq.d/* r,
apparmor: add package Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> 2021-05-18 01:27:21 +00:00			`--- a/profiles/apparmor.d/usr.sbin.dnsmasq`
			`+++ b/profiles/apparmor.d/usr.sbin.dnsmasq`
apparmor: cleanup * replace 020-fix-ss-path.patch with an upstream patch 020-remove-which-dep.patch * remove 030-remove-pynotify2-dep.patch and do not install aa-notify * simplify 060-openwrt-dnsmasq-profile.patch * add two upstream patches for Python 3.10 compatibility * add an upstream patch to move from deprecated distutils which broke the build with Python 3.10+ Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> 2021-11-12 16:02:51 +00:00			`@@ -18,6 +18,7 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq`
apparmor: add package Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> 2021-05-18 01:27:21 +00:00			`include <abstractions/base>`
			`include <abstractions/dbus>`
			`include <abstractions/nameservice>`
			`+ include <abstractions/user-tmp>`

			`capability chown,`
			`capability net_bind_service,`
apparmor: cleanup * replace 020-fix-ss-path.patch with an upstream patch 020-remove-which-dep.patch * remove 030-remove-pynotify2-dep.patch and do not install aa-notify * simplify 060-openwrt-dnsmasq-profile.patch * add two upstream patches for Python 3.10 compatibility * add an upstream patch to move from deprecated distutils which broke the build with Python 3.10+ Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> 2021-11-12 16:02:51 +00:00			`@@ -38,6 +39,8 @@ profile dnsmasq /usr/{bin,sbin}/dnsmasq`
apparmor: add package Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> 2021-05-18 01:27:21 +00:00
apparmor: cleanup * replace 020-fix-ss-path.patch with an upstream patch 020-remove-which-dep.patch * remove 030-remove-pynotify2-dep.patch and do not install aa-notify * simplify 060-openwrt-dnsmasq-profile.patch * add two upstream patches for Python 3.10 compatibility * add an upstream patch to move from deprecated distutils which broke the build with Python 3.10+ Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> 2021-11-12 16:02:51 +00:00			`@{PROC}/@{pid}/fd/ r,`
apparmor: add package Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com> 2021-05-18 01:27:21 +00:00
			`+ /tmp/** r,`
			`+`
apparmor: cleanup * replace 020-fix-ss-path.patch with an upstream patch 020-remove-which-dep.patch * remove 030-remove-pynotify2-dep.patch and do not install aa-notify * simplify 060-openwrt-dnsmasq-profile.patch * add two upstream patches for Python 3.10 compatibility * add an upstream patch to move from deprecated distutils which broke the build with Python 3.10+ Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz> 2021-11-12 16:02:51 +00:00			`/etc/dnsmasq.conf r,`
			`/etc/dnsmasq.d/ r,`
			`/etc/dnsmasq.d/* r,`