Skip to content
GitLab
  • Menu
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • P pkg-gpsd
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Merge requests 2
    • Merge requests 2
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Jobs
  • Commits
Collapse sidebar
  • Debian GPS team
  • pkg-gpsd
  • Merge requests
  • !4

device-hook apparmor fixes (LP: #1868363)

  • Review changes

  • Download
  • Email patches
  • Plain diff
Merged Christian Ehrhardt requested to merge paelzer-guest/pkg-gpsd:device-hook-apparmor-fixes into master Mar 26, 2020
  • Overview 1
  • Commits 1
  • Pipelines 1
  • Changes 1

The manpage defines a hook that is called by gpsd which due to current confinement it is unable to run.

  • d/usr.sbin.gpsd: allow to call the /etc/gpsd/device-hook in the apparmor profile
  • d/usr.sbin.gpsd: allow to map and execute the own binary as needed in some containers
  • d/usr.sbin.gpsd: allow to run common shell interpreters bash/dash

That hook will run within the confinement of gpsd, so if it is expected to do anything more special a user will have to allow that in /etc/apparmor.d/local/usr.sbin.gpsd

Assignee
Assign to
Reviewer
Request review from
Time tracking
Source branch: device-hook-apparmor-fixes