From 1f417ea8292e78b9bd5a3526f2218213fd778d36 Mon Sep 17 00:00:00 2001 From: Francois Marier Date: Sun, 24 Feb 2019 23:35:32 -0800 Subject: [PATCH 1/2] Fix AppArmor profile for Debian unstable --- extras/apparmor/usr.sbin.fwknopd | 2 ++ 1 file changed, 2 insertions(+) diff --git a/extras/apparmor/usr.sbin.fwknopd b/extras/apparmor/usr.sbin.fwknopd index e7caa779..f05254d1 100644 --- a/extras/apparmor/usr.sbin.fwknopd +++ b/extras/apparmor/usr.sbin.fwknopd @@ -23,6 +23,7 @@ /etc/nsswitch.conf r, /etc/passwd r, /etc/protocols r, + @{PROC}/@{pid}/net/ip_tables_names r, /root/.gnupg/* rwkl, /run/fwknop/ rw, /run/fwknop/* rwk, @@ -30,6 +31,7 @@ /sbin/xtables-multi rix, /usr/bin/gpg rix, /usr/sbin/fwknopd mr, + /usr/sbin/xtables-nft-multi rix, /var/cache/nscd/passwd r, } From 973043a4114d93d4aeb3e0b5198f490c851c1041 Mon Sep 17 00:00:00 2001 From: Francois Marier Date: Mon, 25 Feb 2019 13:18:11 -0800 Subject: [PATCH 2/2] Include systemd unit files in tarballs --- Makefile.am | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Makefile.am b/Makefile.am index 160142fa..18ac2cd2 100644 --- a/Makefile.am +++ b/Makefile.am @@ -70,6 +70,8 @@ EXTRA_DIST = \ extras/console-qr/console-qr.sh \ extras/sanitizer/asan-build.sh \ extras/sanitizer/ubsan-build.sh \ + extras/systemd/fwknopd.service \ + extras/systemd/fwknopd.tmpfiles.conf \ extras/clang/scan-build.sh \ fwknop.spec \ iphone/main.m \