File apparmor-profiles-dnsmasq.diff of Package apparmor
=== modified file 'profiles/apparmor.d/usr.sbin.dnsmasq'
---
profiles/apparmor.d/usr.sbin.dnsmasq | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
--- a/profiles/apparmor.d/usr.sbin.dnsmasq
+++ b/profiles/apparmor.d/usr.sbin.dnsmasq
@@ -23,6 +23,7 @@
capability net_admin, # for DHCP server
capability net_raw, # for DHCP server ping checks
network inet raw,
+ network inet6 raw,
/etc/dnsmasq.conf r,
/etc/dnsmasq.d/ r,
@@ -38,14 +39,18 @@
/var/lib/misc/dnsmasq.leases rw, # Required only for DHCP server usage
+ # nscd access is needed
+ /{,var/}run/nscd/group r,
+ /{,var/}run/nscd/passwd r,
+
# for the read-only TFTP server
@{TFTP_DIR}/ r,
@{TFTP_DIR}/** r,
- # libvirt lease and hosts files for dnsmasq
+ # libvirt config, lease and hosts files for dnsmasq
/var/lib/libvirt/dnsmasq/ r,
+ /var/lib/libvirt/dnsmasq/* r,
/var/lib/libvirt/dnsmasq/*.leases rw,
- /var/lib/libvirt/dnsmasq/*.hostsfile r,
# libvirt pid files for dnsmasq
/{,var/}run/libvirt/network/ r,