isc-dhcp-client should move aside old sbin.dhclient3 AppArmor profile

Bug #688191 reported by Jamie Strandboge on 2010-12-09
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
isc-dhcp (Ubuntu)
Medium
Jamie Strandboge

Bug Description

We need to clean up the old AppArmor profile for upgrades from Ubuntu 10.10 to 11.04 and 10.04 to 12.04 (ie, dhcp3-client -> isc-dhcp-client transition). This is needed (as opposed to simply waiting for a 'purge') because the dhclient3 and the dhclient profiles provide AppArmor rules for the same binaries (/usr/lib/NetworkManager/nm-dhcp-client.action and /usr/lib/connman/scripts/dhclient-script) and not moving the old profile aside would mean that the old rules for these binaries take precedence over the rules provided by the new dhclient profile, since the old one is loaded later.

Related branches

Changed in isc-dhcp (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → Medium
status: New → In Progress
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package isc-dhcp - 4.1.1-P1-15ubuntu2

---------------
isc-dhcp (4.1.1-P1-15ubuntu2) natty; urgency=low

  * debian/apparmor-profile.dhcpd: allow read access to @{PROC}/[0-9]*/net/dev
    LP: #688186
  * debian/apparmor-profile.dhclient: tighten to allow access to
    @{PROC}/[0-9]*/net/**, not @{PROC}/sys/net
  * debian/isc-dhcp-client.postinst: move the old dhclient3 AppArmor aside on
    upgrade. This is needed to properly support upgrades to 11.04 and 12.04.
    LP: #688191
 -- Jamie Strandboge <email address hidden> Thu, 09 Dec 2010 11:21:53 -0600

Changed in isc-dhcp (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers