http://bugzilla.opensuse.org/show_bug.cgi?id=1089594 Bug ID: 1089594 Summary: AppArmor profile for updatedb Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: tchvatal@suse.com Reporter: suse-beta@cboltz.de QA Contact: qa-bugs@suse.de Found By: Beta-Customer Blocker: --- Created attachment 767160 --> http://bugzilla.opensuse.org/attachment.cgi?id=767160&action=edit AppArmor profile for updatedb As mentioned in bug 727971, here's an AppArmor profile for updatedb. Creating that profile was simple and boring ;-) Can you please test it before we package it? Save the attached profile as /etc/apparmor.d/usr.bin.updatedb, run "rcapparmor reload" and then run updatedb and/or wait for the cronjob to run. Afterwards, check your audit.log if there are any denials. Note that the profile will need some polishing before we package it (for example a small copyright header and a local/ include), but that shouldn't stop you from testing ;-) Also note that I only tested with manually running updatedb as "nobody" - I was too impatient to wait for the cronjob ;-) Testing as root might also be a good idea. -- You are receiving this mail because: You are on the CC list for the bug.