[apparmor] [patch] Add python to the "no Px rule" list in logprof.conf

Christian Boltz apparmor at cboltz.de
Tue Nov 17 23:53:33 UTC 2015


Hello,

$subject.

To make things more interesting, /usr/bin/python and /usr/bin/python[23]
are symlinks to /usr/bin/python[23].[0-9], so we have to explicitely
list several versions.

If you think I missed an important/wide-spread python version number,
please tell me so that I can add it.


I propose this patch for trunk and 2.9.


(On the long term, we might want regex support here, but that's another
story - and I'm not sure yet if it's worth the effort.)


[ utils-logprof.conf.diff ]

=== modified file 'utils/logprof.conf'
--- utils/logprof.conf  2014-08-21 00:14:24 +0000
+++ utils/logprof.conf  2015-11-17 23:41:48 +0000
@@ -106,6 +106,12 @@
   /usr/bin/killall = icn
   /usr/bin/nice = icn
   /usr/bin/perl = icn
+  /usr/bin/python       = icn
+  /usr/bin/python2      = icn
+  /usr/bin/python2.7    = icn
+  /usr/bin/python3      = icn
+  /usr/bin/python3.3    = icn
+  /usr/bin/python3.4    = icn
   /usr/bin/tr   = icn
 
 [required_hats]



Regards,

Christian Boltz
-- 
> I forgot to mention: The default language will of course be English!
In UTF-8 or latin1? [> Christoph Thiel and Marcus Meissner]




More information about the AppArmor mailing list