slapd apparmor profile needs update for multiple databases

[PatRiehecky]

Binary package hint: slapd

When adding another database (like accesslog, which is provided with the package) there must be a place to store the corresponding bdb files. Traditionally the place is /var/lib/ldap/<dbname> but the apparmor profile prevents these from being used.

The below diff corrects this problem so that any directory under /var/lib/ldap can be used by slapd as a bdb directory. This bug is visible in Hardy and Intrepid.

--- usr.sbin.slapd_orig 2008-10-20 15:17:36.000000000 -0500
+++ usr.sbin.slapd 2008-10-20 15:14:11.000000000 -0500
@@ -35,7 +35,7 @@

   # the databases and logs
   /var/lib/ldap/ r,
- /var/lib/ldap/* rw,
+ /var/lib/ldap/** rwk,

   # lock file
   /var/lib/ldap/alock kw,