← Back to branch summary

~ubuntu-branches/ubuntu/trusty/apparmor/trusty-updates

« back to all changes in this revision

Viewing changes to profiles/apparmor.d/usr.lib.dovecot.auth

  • Committer: Package Import Robot
  • Author(s): Steve Beattie
  • Date: 2015-04-30 12:18:08 UTC
  • mfrom: (72.1.1 trusty-security)
  • Revision ID: package-import@ubuntu.com-20150430121808-ksonjffnoo5ela3r
Tags: 2.8.95~2430-0ubuntu5.2
https://launchpad.net/bugs/1401084
https://launchpad.net/bugs/1403468
https://launchpad.net/bugs/1010909
https://launchpad.net/bugs/1304447
https://launchpad.net/bugs/1296667
https://launchpad.net/bugs/1339727
https://launchpad.net/bugs/1340927
https://launchpad.net/bugs/1399027
https://launchpad.net/bugs/1425398
https://launchpad.net/bugs/1373259
https://launchpad.net/bugs/1449769
https://launchpad.net/bugs/1294797
https://launchpad.net/bugs/1319829
https://launchpad.net/bugs/1317176
https://launchpad.net/bugs/1324154
https://launchpad.net/bugs/1378095
https://launchpad.net/bugs/1310598
* debian/patches/php5-Zend_semaphore-lp1401084.patch: allow php5
  abstraction access to Zend opcache files (LP: #1401084)
* debian/patches/dnsmasq-lxc_networking-lp1403468.patch: update
  profile for lxc support (LP: #1403468)
* debian/patches/profiles-texlive_font_generation-lp1010909.patch:
  allow generation of texlive fonts by sanitized-helpers
  (LP: #1010909)
* debian/apport/source_apparmor.py: fix the apparmor apport hook
  so it does not raise an exception if a non-unicode character is
  found in /var/log/kern.log or in /var/log/syslog. This should
  work under python3 or python2.7 (LP: #1304447)
* debian/patches/profiles-dovecot-updates-lp1296667.patch: update
  dovecot profiles to address several missing permissions.
  (LP: #1296667)
* debian/patches/profiles-adjust_X_for_lightdm-lp1339727.patch:
  adjust X abstraction for LightDM xauthority location (LP: #1339727)
* debian/patches/libapparmor-fix_memory_leaks-lp1340927.patch; fix
  memory leaks in log parsing component of libapparmor (LP: #1340927)
* debian/patches/libapparmor-another_audit_format-lp1399027.patch:
  add support for another log format style (LP: #1399027)
* debian/patches/tests-workaround_for_unix_socket_change-lp1425398.patch:
  work around apparmor kernel behavioral change in regression tests
  (LP: #1425398)
* debian/control: add breaks on python3-apparmor against older
  apparmor-utils that used to be where python bits lived
  (LP: #1373259)
* debian/patches/utils-update_to_2.9.2.patch: update the python
  utilities to the upstream 2.9.2 (LP: #1449769, incorporating a
  large number of fixes and improvements, including:
  - fix aa-genprof traceback with apparmor 2.8.95 (LP: #1294797)
  - fix aa-genprof crashing when selecting scan on Ubuntu 14.04 server
    (LP: #1319829)
  - make aa-logprof read profile instead of program binary
    (LP: #1317176, LP: #1324154)
  - aa-complain: don't traceback when marking multiple profiles
    (LP: #1378095)
  - make python tools able to parse mounts with UTF-8 non-ascii
    characters (LP: #1310598)

Show diffs side-by-side

added added

removed removed

Lines of Context:
profiles/apparmor.d/usr.lib.dovecot.auth
1
1
# ------------------------------------------------------------------
2
2
#
3
3
#    Copyright (C) 2013 Christian Boltz
 
4
#    Copyright (C) 2014 Christian Wittmer
4
5
#
5
6
#    This program is free software; you can redistribute it and/or
6
7
#    modify it under the terms of version 2 of the GNU General Public
16
17
  #include <abstractions/base>
17
18
  #include <abstractions/mysql>
18
19
  #include <abstractions/nameservice>
19
 
 
20
 
  deny capability block_suspend,
 
20
  #include <abstractions/openssl>
 
21
  #include <abstractions/wutmp>
 
22
  #include <abstractions/dovecot-common>
21
23
 
22
24
  capability audit_write,
23
 
  capability setgid,
24
25
  capability setuid,
25
26
 
26
27
  /etc/my.cnf r,
27
28
  /etc/my.cnf.d/ r,
28
29
  /etc/my.cnf.d/*.cnf r,
29
30
 
30
 
  /etc/dovecot/dovecot-database.conf.ext r,
31
 
  /etc/dovecot/dovecot-sql.conf.ext r,
 
31
  /etc/dovecot/* r,
32
32
  /usr/lib/dovecot/auth mr,
33
33
 
34
34
  # kerberos replay cache
37
37
  /var/tmp/sieve_* rw,
38
38
  /var/tmp/smtp_* rw,
39
39
 
 
40
  /{var/,}run/dovecot/auth-token-secret.dat{,.tmp} rw,
 
41
 
40
42
  # Site-specific additions and overrides. See local/README for details.
41
43
  #include <local/usr.lib.dovecot.auth>
42
44
}