[apparmor] Apparmor profile for mtr

Kaan Özdinçer kaanozdincer at gmail.com
Tue May 14 15:13:23 UTC 2013


Hi all,

We talked about meeting with cboltz and he wrote me an email below.
Because of that. I tried to make apparmor profile for *mtr*

#include <tunables/global>

/usr/sbin/mtr {
   #include <abstractions/base>
   #include <abstractions/nameservice>


   capability net_raw,
   capability setgid,
   capability setuid,

   network inet raw,
   network inet6 raw,


   /usr/sbin/mtr mr,
   /usr/share/terminfo/x/xterm r,

}

see you on meeting.

Regards.


On 05/09/2013 12:19 AM, Christian Boltz wrote:
> To make you familiar with profile generation, I'd also like to ask you
> to create a profile for a program of your choice [2] (using the existing
> aa-genprof and aa-logprof) and send it to the AppArmor mailinglist
> before the meeting.

> [2] please choose one that doesn't have a profile already ;-) and that
>      you know good enough

-- 
Kaan Özdinçer
http://kaan.ozdincer.com



More information about the AppArmor mailing list