summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorMartin Pitt <martin.pitt@ubuntu.com>2013-03-12 12:48:34 +0100
committerMartin Pitt <martin.pitt@ubuntu.com>2013-03-12 12:48:34 +0100
commit197c8b13f84dd73b1dc6ff02997810cfc1dbeaee (patch)
tree42bcc08a2fa52a76938e50191d7dd6ae73feb394 /data
parent9136d42339992e6e89588d5a584a1fddfc59075d (diff)
downloadlightdm-197c8b13f84dd73b1dc6ff02997810cfc1dbeaee.tar.gz
Adjust AppArmor profile to also work with logind
logind uses UIDs instead of user names in /run/user/. As we restrict access to "owner", and /run/user/* are 700 anyway, this is safe.
Diffstat (limited to 'data')
-rw-r--r--data/guest-session.apparmor_abstraction4
1 files changed, 2 insertions, 2 deletions
diff --git a/data/guest-session.apparmor_abstraction b/data/guest-session.apparmor_abstraction
index f73edd2d..bd60f90f 100644
--- a/data/guest-session.apparmor_abstraction
+++ b/data/guest-session.apparmor_abstraction
@@ -60,8 +60,8 @@
# necessary for writing to sockets, etc.
/{,var/}run/** rmkix,
/{,var/}run/shm/** wl,
- # libpam-xdg-support
- owner /{,var/}run/user/guest-*/** rw,
+ # libpam-xdg-support/logind
+ owner /{,var/}run/user/*/** rw,
capability ipc_lock,