[apparmor] [patch] Allow 'kcm' in network rules
Seth Arnold
seth.arnold at canonical.com
Mon Sep 12 20:12:17 UTC 2016
On Sun, Sep 11, 2016 at 02:31:12PM +0200, Christian Boltz wrote:
> Hello,
>
> $subject.
>
> This is probably
> https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/plain/Documentation/networking/kcm.txt
>
> Thanks to OBS for bringing this up when building apparmor.vim ;-)
>
>
> I propose this patch for trunk and 2.10.
Acked for both: (Also I blame you for taking twenty minutes of my day with
the interesting link. :)
Acked-by: Seth Arnold <seth.arnold at canonical.com>
Thanks
>
>
>
> [ utils-network-kcm.diff ]
>
> === modified file ./utils/apparmor/rule/network.py
> --- utils/apparmor/rule/network.py 2016-08-14 22:03:16.873725215 +0200
> +++ utils/apparmor/rule/network.py 2016-09-11 14:19:50.691948565 +0200
> @@ -27,7 +27,7 @@
> network_domain_keywords = [ 'unspec', 'unix', 'inet', 'ax25', 'ipx', 'appletalk', 'netrom', 'bridge', 'atmpvc', 'x25', 'inet6',
> 'rose', 'netbeui', 'security', 'key', 'netlink', 'packet', 'ash', 'econet', 'atmsvc', 'rds', 'sna',
> 'irda', 'pppox', 'wanpipe', 'llc', 'can', 'tipc', 'bluetooth', 'iucv', 'rxrpc', 'isdn', 'phonet',
> - 'ieee802154', 'caif', 'alg', 'nfc', 'vsock', 'mpls', 'ib' ]
> + 'ieee802154', 'caif', 'alg', 'nfc', 'vsock', 'mpls', 'ib', 'kcm' ]
>
> network_type_keywords = ['stream', 'dgram', 'seqpacket', 'rdm', 'raw', 'packet']
> network_protocol_keywords = ['tcp', 'udp', 'icmp']
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160912/6713e621/attachment.pgp>
More information about the AppArmor
mailing list