File sssd-mcpath.diff of Package apparmor.9516
sssd on Leap 42.3 uses non-default paths, adjust abstractions/nameservice accordingly
(not needed on 15.0 or Tumbleweed)
diff --git a/profiles/apparmor.d/abstractions/nameservice b/profiles/apparmor.d/abstractions/nameservice
index e6dcb764..8a2de73f 100644
--- profiles/apparmor.d/abstractions/nameservice
+++ profiles/apparmor.d/abstractions/nameservice
@@ -31,9 +31,9 @@
# When using sssd, the passwd and group files are stored in an alternate path
# and the nss plugin also needs to talk to a pipe
- /var/lib/sss/mc/group r,
- /var/lib/sss/mc/initgroups r,
- /var/lib/sss/mc/passwd r,
+ /var/lib/sss/mc{,path}/group r,
+ /var/lib/sss/mc{,path}/initgroups r,
+ /var/lib/sss/mc{,path}/passwd r,
/var/lib/sss/pipes/nss rw,
/etc/resolv.conf r,