[apparmor] [patch] traceroute profile (apparmor-profiles-traceroute)

Christian Boltz apparmor at cboltz.de
Sun Aug 21 16:06:52 UTC 2011


Hello,

another :-/ patch from openSUSE 11.4 that never made it to Factory.


Bug 685674 - The "-I" flag of traceroute is blocked by apparmor

* Do Apr 07 2011 jeffm at suse.de
- Add raw network access to traceroute profile (bnc#685674).


Regards,

Christian Boltz
-- 
Das einzige Feature von OE das du unter Linux nicht nachgebaut bekommen
wirst: Die Virenschleuder ;-)            [Damian Philipp in suse-linux]
-------------- next part --------------
Bug 685674 - The "-I" flag of traceroute is blocked by apparmor

* Do Apr 07 2011 jeffm at suse.de
- Add raw network access to traceroute profile (bnc#685674).


---
 profiles/apparmor.d/usr.sbin.traceroute |    2 ++
 1 file changed, 2 insertions(+)

--- a/profiles/apparmor.d/usr.sbin.traceroute
+++ b/profiles/apparmor.d/usr.sbin.traceroute
@@ -18,6 +18,8 @@
 
   capability net_raw,
 
+  network inet raw,
+
   /usr/sbin/traceroute rmix,
   @{PROC}/net/route r,
 }


More information about the AppArmor mailing list