Hi Gerald, Am 06.02.20 um 10:44 schrieb Gerald Hammer:
I cured the problem by adding a line to /etc/apparmor.d/usr.sbin.nscd :
... /etc/netgroup r, /etc/nscd.conf r, /usr/{bin,sbin}/nscd rmix, # following line added, Gerald Hammer, 2020-02-06 /usr/etc/services r, ...
an then loading it in the running apparmor by
# apparmor_parser -r /etc/apparmor.d/usr.sbin.nscd
But it already contains #include <abstractions/nameservice> and /etc/apparmor.d/abstractions/nameservice contains /{usr/,}etc/services r, So it is unclear why this is necessary. The whole idea of abstractions/nameservice is that you do not need to put this into every service's rule. -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org