[apparmor] [patch] Allow 'kcm' in network rules
Christian Boltz
apparmor at cboltz.de
Sun Sep 11 12:31:12 UTC 2016
Hello,
$subject.
This is probably
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/plain/Documentation/networking/kcm.txt
Thanks to OBS for bringing this up when building apparmor.vim ;-)
I propose this patch for trunk and 2.10.
[ utils-network-kcm.diff ]
=== modified file ./utils/apparmor/rule/network.py
--- utils/apparmor/rule/network.py 2016-08-14 22:03:16.873725215 +0200
+++ utils/apparmor/rule/network.py 2016-09-11 14:19:50.691948565 +0200
@@ -27,7 +27,7 @@
network_domain_keywords = [ 'unspec', 'unix', 'inet', 'ax25', 'ipx', 'appletalk', 'netrom', 'bridge', 'atmpvc', 'x25', 'inet6',
'rose', 'netbeui', 'security', 'key', 'netlink', 'packet', 'ash', 'econet', 'atmsvc', 'rds', 'sna',
'irda', 'pppox', 'wanpipe', 'llc', 'can', 'tipc', 'bluetooth', 'iucv', 'rxrpc', 'isdn', 'phonet',
- 'ieee802154', 'caif', 'alg', 'nfc', 'vsock', 'mpls', 'ib' ]
+ 'ieee802154', 'caif', 'alg', 'nfc', 'vsock', 'mpls', 'ib', 'kcm' ]
network_type_keywords = ['stream', 'dgram', 'seqpacket', 'rdm', 'raw', 'packet']
network_protocol_keywords = ['tcp', 'udp', 'icmp']
Regards,
Christian Boltz
--
> Ich nehme also das apache.spm von SuSE und
...befördere es in einen Mülleimer. Dann gehe ich auf
www.apachetoolbox.com und mache mir das Leben leicht.
[> Soeren Mindorf und Ratti in suse-linux]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160911/30711dd3/attachment.pgp>
More information about the AppArmor
mailing list