slapd apparmor profile needs update for multiple databases

[PatRiehecky]

Binary package hint: slapd

When adding another database (like accesslog, which is provided with the package) there must be a place to store the corresponding bdb files. Traditionally the place is /var/lib/ldap/<dbname> but the apparmor profile prevents these from being used.

The below diff corrects this problem so that any directory under /var/lib/ldap can be used by slapd as a bdb directory. This bug is visible in Hardy and Intrepid.

--- usr.sbin.slapd_orig 2008-10-20 15:17:36.000000000 -0500
+++ usr.sbin.slapd 2008-10-20 15:14:11.000000000 -0500
@@ -35,7 +35,7 @@

   # the databases and logs
   /var/lib/ldap/ r,
- /var/lib/ldap/* rw,
+ /var/lib/ldap/** rwk,

   # lock file
   /var/lib/ldap/alock kw,

[Launchpad Janitor (janitor)]

This bug was fixed in the package openldap - 2.4.15-1ubuntu2

---------------
openldap (2.4.15-1ubuntu2) jaunty; urgency=low

  * debian/slapd.postinst: create /var/run/slapd before updating its
    permissions (LP: #298928).
  * debian/slapd.init: Correclty set slapd config backend option even if the
    pidfile is configured in slapd default file (LP: #292364).
  * debian/apparmor-profile: support multiple databases to be stored under
    /var/lib/ldap/. (LP: #286614).

 -- Mathias Gug <email address hidden> Fri, 13 Mar 2009 13:56:12 -0400