Quack,
On 2021-01-17 02:20, Filippo Giunchedi wrote:
On Wed, Apr 01, 2020 at 07:03 PM, Marc Dequènes wrote:
I added this line to the apparmor policy:
/usr/share/GeoIP/GeoIP.dat r,
Btw the package could also Suggest geoip-database needed for this
module.
Thank you for the report, I'm not an apparmor expert but I'm happy to
include support in the package (at
https://salsa.debian.org/debian/inspircd)
Suggesting 'geoip-database' is a good idea, I'll add that!
So that works for Inspircd v2. Not sure that's of much value now since
the release is close.
v3 now uses the GeoLite2 DB and that's not available without
registration IIUC. But for people OK to register there is the
geoipupdate package that can use a token to download it.
I have no idea where it stores the files but it should not be difficult
to get this information. Then you can simply update the path in the
apparmor profile.
Another suggestion: to allow admins to add little fixes or adaptations
to the apparmor policy I saw that several packages include a file in
/etc/apparmor.d/local/ (chronyd for eg), which is ignored if the file is
missing, very practical. For Inspircd that would give (at the end of the
rules but inside the braquets):
#include <local/usr.sbin.inspircd>
Hope that helps.
\_o<
--
Marc Dequènes
