commit 45edd5a6081083fb772ef416edeced7c7a2427de
Author: Simon Deziel <simon@sdeziel.info>
Date: Mon Apr 4 16:17:48 2022 -0400
apparmor: allow reading /etc/ssl/openssl.cnf
On start squid would trigger this (in a LXD container):
audit: type=1400 audit(1649103043.583:223): apparmor="DENIED" operation="open" \
namespace="root//lxd-squid_<var-snap-lxd-common-lxd>" \
profile="/usr/sbin/squid" name="/etc/ssl/openssl.cnf" pid=1004228 \
comm="squid" requested_mask="r" denied_mask="r" fsuid=1589824 ouid=1589824
Instead of allowing just the openssl.cnf file, use the proper
abstraction.
Signed-off-by: Simon Deziel <simon@sdeziel.info>
There is 1 open security issue in buster.
You can find information about how to handle this issue in the security team's documentation.
There is 1 open security issue in bullseye.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/s/squid.png){kind=link}