Hi Gerald,
Am 06.02.20 um 10:44 schrieb Gerald Hammer:
I cured the problem by adding a line to /etc/apparmor.d/usr.sbin.nscd :
...
/etc/netgroup r,
/etc/nscd.conf r,
/usr/{bin,sbin}/nscd rmix,
# following line added, Gerald Hammer, 2020-02-06
/usr/etc/services r,
...
an then loading it in the running apparmor by
# apparmor_parser -r /etc/apparmor.d/usr.sbin.nscd
But it already contains
#include
and /etc/apparmor.d/abstractions/nameservice contains
/{usr/,}etc/services r,
So it is unclear why this is necessary.
The whole idea of abstractions/nameservice is that you do not need to
put this into every service's rule.
--
Stefan Seyfried
"For a successful technology, reality must take precedence over
public relations, for nature cannot be fooled." -- Richard Feynman
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org