File apparmor-profiles-ntpd-flags.diff of Package apparmor.9786

revno: 3037
committer: Christian Boltz <apparmor@cboltz.de>
branch nick: apparmor
timestamp: Tue 2015-05-19 01:20:49 +0200
References: bsc#1022610
  Add the attach_disconnected flag to the ntpd profile
  
  I noticed "disconnected path" (run/nscd/*) events for ntpd while
  updating to the latest openSUSE Tumbleweed.
  
  
  Acked-by: Seth Arnold <seth.arnold@canonical.com> for trunk and 2.9.

Index: apparmor-2.8.2/profiles/apparmor.d/usr.sbin.ntpd
===================================================================
--- apparmor-2.8.2.orig/profiles/apparmor.d/usr.sbin.ntpd
+++ apparmor-2.8.2/profiles/apparmor.d/usr.sbin.ntpd
@@ -11,7 +11,7 @@
 
 #include <tunables/global>
 #include <tunables/ntpd>
-/usr/sbin/ntpd {
+/usr/sbin/ntpd flags=(attach_disconnected) {
   #include <abstractions/base>
   #include <abstractions/nameservice>
   #include <abstractions/openssl>