diff -u openldap-2.4.31/debian/apparmor-profile openldap-2.4.31/debian/apparmor-profile --- openldap-2.4.31/debian/apparmor-profile +++ openldap-2.4.31/debian/apparmor-profile @@ -45,7 +45,8 @@ # pid files and sockets /{,var/}run/slapd/* w, - /{,var/}run/nslcd/* w, + /{,var/}run/slapd/ldapi rw, + /{,var/}run/nslcd/socket rw, /usr/lib/ldap/ r, /usr/lib/ldap/* mr, diff -u openldap-2.4.31/debian/changelog openldap-2.4.31/debian/changelog --- openldap-2.4.31/debian/changelog +++ openldap-2.4.31/debian/changelog @@ -1,3 +1,10 @@ +openldap (2.4.31-1+nmu2ubuntu11.2) utopic; urgency=medium + + * debian/apparmor-profile: Change 'r' to 'rw' for ldapi and nslcd sockets, + required for apparmor kernel ABI v7 (utopic and later). (LP: #1392018) + + -- Ryan Tandy Thu, 25 Jun 2015 09:38:56 -0700 + openldap (2.4.31-1+nmu2ubuntu11.1) utopic-security; urgency=medium * SECURITY UPDATE: fix rwm overlay reference counting. (LP: #1446809)