From 065f2233acc6b320e47b8fa4d56168bccce87157 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Mon, 29 Apr 2024 11:58:55 +0100 Subject: [PATCH] feat(abs): ensure pam-tmpdir-helper is allowed in the auth abs for all distribution. --- apparmor.d/abstractions/authentication.d/complete | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/apparmor.d/abstractions/authentication.d/complete b/apparmor.d/abstractions/authentication.d/complete index 6ecb0e319..de6c758b3 100644 --- a/apparmor.d/abstractions/authentication.d/complete +++ b/apparmor.d/abstractions/authentication.d/complete @@ -1,8 +1,10 @@ + @{bin}/pam-tmpdir-helper rPx, + + #aa:exclude ubuntu @{bin}/unix_chkpwd rPx, #aa:only whonix - @{bin}/pam-tmpdir-helper rPx, @{lib}/security-misc/pam_faillock_not_if_x rPx, @{lib}/security-misc/pam-abort-on-locked-password rPx, @{lib}/security-misc/pam-info rPx,