Ubuntu
apparmor package

  1. Bug #445818
  2. Comment #3

Comment 3 for bug 445818

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

SRU REQUEST

1. dnsmasq profile does not work when using a wireless interface. Fix is trivial.

2. The fix is not in Lucid yet

3. The fix is to adjust profiles/apparmor.d/usr.sbin.dnsmasq:
- /var/run/dnsmasq.pid w,
+ /var/run/dnsmasq*.pid w,

4. TEST CASE:
- apt-get install apparmor-profiles dnsmasq
- enable the dnsmasq profile with 'aa-enforce /etc/apparmor.d/usr.sbin.dnsmasq'
- bring up a wireless interface

5. The regression potential is very low. We only allow access to files that we didn't previously have access to and the dnsmasq profile is a complain-mode file in the default install.